Deltree \clients\client1
NTCreateX \clients 0x1 0x3 12114 1001
Close 12114 1
NTCreateX \clients\client1 0x1 0x2 12115
Close 12115
QUERY_PATH_INFORMATION \clients\client1
QUERY_PATH_INFORMATION \clients
NTCreateX \clients\client1\mixfile 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp 0x1 0x2 12119
Close 12119
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
NTCreateX \clients\client1\filler.000 0x40 0x2 12120
QUERY_FS_INFORMATION 1
WriteX 12120 65534 1 1
QUERY_FILE_INFORMATION 12120
WriteX 12120 0 65471 65471
WriteX 12120 65471 64 64
WriteX 12120 65535 65471 65471
WriteX 12120 131006 64 64
WriteX 12120 131070 65471 65471
WriteX 12120 196541 64 64
WriteX 12120 196605 65471 65471
WriteX 12120 262076 64 64
WriteX 12120 262140 65471 65471
WriteX 12120 327611 64 64
WriteX 12120 327675 65471 65471
WriteX 12120 393146 64 64
WriteX 12120 393210 65471 65471
WriteX 12120 458681 64 64
WriteX 12120 458745 65471 65471
WriteX 12120 524216 64 64
WriteX 12120 524280 65471 65471
WriteX 12120 589751 64 64
WriteX 12120 589815 65471 65471
WriteX 12120 655286 64 64
WriteX 12120 655350 65471 65471
WriteX 12120 720821 64 64
WriteX 12120 720885 65471 65471
WriteX 12120 786356 64 64
WriteX 12120 786420 65471 65471
WriteX 12120 851891 64 64
WriteX 12120 851955 65471 65471
WriteX 12120 917426 64 64
WriteX 12120 917490 65471 65471
WriteX 12120 982961 64 64
WriteX 12120 983025 65471 65471
WriteX 12120 1048496 64 64
WriteX 12120 1048560 16 16
Close 12120
FIND_FIRST \clients\client1\FILLER*
NTCreateX \clients\client1\filler.001 0x40 0x2 12121
WriteX 12121 65534 1 1
QUERY_FILE_INFORMATION 12121
WriteX 12121 0 65471 65471
WriteX 12121 65471 64 64
WriteX 12121 65535 65471 65471
WriteX 12121 131006 64 64
WriteX 12121 131070 65471 65471
WriteX 12121 196541 64 64
WriteX 12121 196605 65471 65471
WriteX 12121 262076 64 64
WriteX 12121 262140 65471 65471
WriteX 12121 327611 64 64
WriteX 12121 327675 65471 65471
WriteX 12121 393146 64 64
WriteX 12121 393210 65471 65471
WriteX 12121 458681 64 64
WriteX 12121 458745 65471 65471
WriteX 12121 524216 64 64
WriteX 12121 524280 65471 65471
WriteX 12121 589751 64 64
WriteX 12121 589815 65471 65471
WriteX 12121 655286 64 64
WriteX 12121 655350 65471 65471
WriteX 12121 720821 64 64
WriteX 12121 720885 65471 65471
WriteX 12121 786356 64 64
WriteX 12121 786420 65471 65471
WriteX 12121 851891 64 64
WriteX 12121 851955 65471 65471
WriteX 12121 917426 64 64
WriteX 12121 917490 65471 65471
WriteX 12121 982961 64 64
WriteX 12121 983025 65471 65471
WriteX 12121 1048496 64 64
WriteX 12121 1048560 16 16
Close 12121
NTCreateX \clients\client1\filler.002 0x40 0x2 12122
WriteX 12122 65534 1 1
QUERY_FILE_INFORMATION 12122
WriteX 12122 0 65471 65471
WriteX 12122 65471 64 64
WriteX 12122 65535 65471 65471
WriteX 12122 131006 64 64
WriteX 12122 131070 65471 65471
WriteX 12122 196541 64 64
WriteX 12122 196605 65471 65471
WriteX 12122 262076 64 64
WriteX 12122 262140 65471 65471
WriteX 12122 327611 64 64
WriteX 12122 327675 65471 65471
WriteX 12122 393146 64 64
WriteX 12122 393210 65471 65471
WriteX 12122 458681 64 64
WriteX 12122 458745 65471 65471
WriteX 12122 524216 64 64
WriteX 12122 524280 65471 65471
WriteX 12122 589751 64 64
WriteX 12122 589815 65471 65471
WriteX 12122 655286 64 64
WriteX 12122 655350 65471 65471
WriteX 12122 720821 64 64
WriteX 12122 720885 65471 65471
WriteX 12122 786356 64 64
WriteX 12122 786420 65471 65471
WriteX 12122 851891 64 64
WriteX 12122 851955 65471 65471
WriteX 12122 917426 64 64
WriteX 12122 917490 65471 65471
WriteX 12122 982961 64 64
WriteX 12122 983025 65471 65471
WriteX 12122 1048496 64 64
WriteX 12122 1048560 16 16
Close 12122
NTCreateX \clients\client1\filler.003 0x40 0x2 12123
WriteX 12123 65534 1 1
QUERY_FILE_INFORMATION 12123
WriteX 12123 0 65471 65471
WriteX 12123 65471 64 64
WriteX 12123 65535 65471 65471
WriteX 12123 131006 64 64
WriteX 12123 131070 65471 65471
WriteX 12123 196541 64 64
WriteX 12123 196605 65471 65471
WriteX 12123 262076 64 64
WriteX 12123 262140 65471 65471
WriteX 12123 327611 64 64
WriteX 12123 327675 65471 65471
WriteX 12123 393146 64 64
WriteX 12123 393210 65471 65471
WriteX 12123 458681 64 64
WriteX 12123 458745 65471 65471
WriteX 12123 524216 64 64
WriteX 12123 524280 65471 65471
WriteX 12123 589751 64 64
WriteX 12123 589815 65471 65471
WriteX 12123 655286 64 64
WriteX 12123 655350 65471 65471
WriteX 12123 720821 64 64
WriteX 12123 720885 65471 65471
WriteX 12123 786356 64 64
WriteX 12123 786420 65471 65471
WriteX 12123 851891 64 64
WriteX 12123 851955 65471 65471
WriteX 12123 917426 64 64
WriteX 12123 917490 65471 65471
WriteX 12123 982961 64 64
WriteX 12123 983025 65471 65471
WriteX 12123 1048496 64 64
WriteX 12123 1048560 16 16
Close 12123
NTCreateX \clients\client1\filler.004 0x40 0x2 12124
WriteX 12124 65534 1 1
QUERY_FILE_INFORMATION 12124
WriteX 12124 0 65471 65471
WriteX 12124 65471 64 64
WriteX 12124 65535 65471 65471
WriteX 12124 131006 64 64
WriteX 12124 131070 65471 65471
WriteX 12124 196541 64 64
WriteX 12124 196605 65471 65471
WriteX 12124 262076 64 64
WriteX 12124 262140 65471 65471
WriteX 12124 327611 64 64
WriteX 12124 327675 65471 65471
WriteX 12124 393146 64 64
WriteX 12124 393210 65471 65471
WriteX 12124 458681 64 64
WriteX 12124 458745 65471 65471
WriteX 12124 524216 64 64
WriteX 12124 524280 65471 65471
WriteX 12124 589751 64 64
WriteX 12124 589815 65471 65471
WriteX 12124 655286 64 64
WriteX 12124 655350 65471 65471
WriteX 12124 720821 64 64
WriteX 12124 720885 65471 65471
WriteX 12124 786356 64 64
WriteX 12124 786420 65471 65471
WriteX 12124 851891 64 64
WriteX 12124 851955 65471 65471
WriteX 12124 917426 64 64
WriteX 12124 917490 65471 65471
WriteX 12124 982961 64 64
WriteX 12124 983025 65471 65471
WriteX 12124 1048496 64 64
WriteX 12124 1048560 16 16
Close 12124
NTCreateX \clients\client1\~dmtmp\WORD 0x1 0x2 12125
Close 12125
NTCreateX \clients\client1\~dmtmp\WORD\CHAP10.DOC 0x40 0x2 12126
WriteX 12126 65534 1 1
QUERY_FILE_INFORMATION 12126
WriteX 12126 0 65471 65471
WriteX 12126 65471 64 64
WriteX 12126 65535 65471 65471
WriteX 12126 131006 64 64
WriteX 12126 131070 65471 65471
WriteX 12126 196541 64 64
WriteX 12126 196605 63491 63491
Close 12126
NTCreateX \clients\client1\~dmtmp\WORD\BASEMACH.DOC 0x40 0x2 12127
WriteX 12127 65534 1 1
QUERY_FILE_INFORMATION 12127
WriteX 12127 0 65471 65471
WriteX 12127 65471 64 64
WriteX 12127 65535 65471 65471
WriteX 12127 131006 64 64
WriteX 12127 131070 65471 65471
WriteX 12127 196541 64 64
WriteX 12127 196605 63491 63491
Close 12127
NTCreateX \clients\client1\~dmtmp\WORD\FACTS.DOC 0x40 0x2 12128
WriteX 12128 65534 1 1
QUERY_FILE_INFORMATION 12128
WriteX 12128 0 65471 65471
WriteX 12128 65471 64 64
WriteX 12128 65535 65471 65471
WriteX 12128 131006 64 64
WriteX 12128 131070 65471 65471
WriteX 12128 196541 64 64
WriteX 12128 196605 63491 63491
Close 12128
NTCreateX \clients\client1\~dmtmp\EXCEL 0x1 0x2 12129
Close 12129
NTCreateX \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS 0x40 0x2 12130
WriteX 12130 65534 1 1
QUERY_FILE_INFORMATION 12130
WriteX 12130 0 65471 65471
WriteX 12130 65471 64 64
WriteX 12130 65535 65471 65471
WriteX 12130 131006 64 64
WriteX 12130 131070 65471 65471
WriteX 12130 196541 64 64
WriteX 12130 196605 63491 63491
Close 12130
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES.XLS 0x40 0x2 12131
WriteX 12131 65534 1 1
QUERY_FILE_INFORMATION 12131
WriteX 12131 0 65471 65471
WriteX 12131 65471 64 64
WriteX 12131 65535 65471 65471
WriteX 12131 131006 64 64
WriteX 12131 131070 65471 65471
WriteX 12131 196541 64 64
WriteX 12131 196605 63491 63491
Close 12131
NTCreateX \clients\client1\~dmtmp\PWRPNT 0x1 0x2 12132
Close 12132
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x2 12133
WriteX 12133 65534 1 1
QUERY_FILE_INFORMATION 12133
WriteX 12133 0 65471 65471
WriteX 12133 65471 64 64
WriteX 12133 65535 65471 65471
WriteX 12133 131006 64 64
WriteX 12133 131070 65471 65471
WriteX 12133 196541 64 64
WriteX 12133 196605 63491 63491
Close 12133
NTCreateX \clients\client1\~dmtmp\PWRPNT\ZD16.BMP 0x40 0x2 12134
WriteX 12134 65534 1 1
QUERY_FILE_INFORMATION 12134
WriteX 12134 0 65471 65471
WriteX 12134 65471 64 64
WriteX 12134 65535 65471 65471
WriteX 12134 131006 64 64
WriteX 12134 131070 65471 65471
WriteX 12134 196541 64 64
WriteX 12134 196605 63491 63491
Close 12134
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA 0x40 0x2 12135
WriteX 12135 65534 1 1
QUERY_FILE_INFORMATION 12135
WriteX 12135 0 65471 65471
WriteX 12135 65471 64 64
WriteX 12135 65535 65471 65471
WriteX 12135 131006 64 64
WriteX 12135 131070 65471 65471
WriteX 12135 196541 64 64
WriteX 12135 196605 63491 63491
Close 12135
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x2 12136
WriteX 12136 65534 1 1
QUERY_FILE_INFORMATION 12136
WriteX 12136 0 65471 65471
WriteX 12136 65471 64 64
WriteX 12136 65535 65471 65471
WriteX 12136 131006 64 64
WriteX 12136 131070 65471 65471
WriteX 12136 196541 64 64
WriteX 12136 196605 63491 63491
Close 12136
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x2 12137
WriteX 12137 65534 1 1
QUERY_FILE_INFORMATION 12137
WriteX 12137 0 65471 65471
WriteX 12137 65471 64 64
WriteX 12137 65535 65471 65471
WriteX 12137 131006 64 64
WriteX 12137 131070 65471 65471
WriteX 12137 196541 64 64
WriteX 12137 196605 63491 63491
Close 12137
NTCreateX \clients\client1\~dmtmp\COREL 0x1 0x2 12138
Close 12138
NTCreateX \clients\client1\~dmtmp\COREL\CDRROLS.CFG 0x40 0x2 12139
WriteX 12139 65534 1 1
QUERY_FILE_INFORMATION 12139
WriteX 12139 0 65471 65471
WriteX 12139 65471 64 64
WriteX 12139 65535 65471 65471
WriteX 12139 131006 64 64
WriteX 12139 131070 65471 65471
WriteX 12139 196541 64 64
WriteX 12139 196605 63491 63491
Close 12139
NTCreateX \clients\client1\~dmtmp\COREL\CDRBARS.CFG 0x40 0x2 12140
WriteX 12140 65534 1 1
QUERY_FILE_INFORMATION 12140
WriteX 12140 0 65471 65471
WriteX 12140 65471 64 64
WriteX 12140 65535 65471 65471
WriteX 12140 131006 64 64
WriteX 12140 131070 65471 65471
WriteX 12140 196541 64 64
WriteX 12140 196605 63491 63491
Close 12140
NTCreateX \clients\client1\~dmtmp\COREL\ARTISTIC.ACL 0x40 0x2 12141
WriteX 12141 65534 1 1
QUERY_FILE_INFORMATION 12141
WriteX 12141 0 65471 65471
WriteX 12141 65471 64 64
WriteX 12141 65535 65471 65471
WriteX 12141 131006 64 64
WriteX 12141 131070 65471 65471
WriteX 12141 196541 64 64
WriteX 12141 196605 63491 63491
Close 12141
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x2 12142
WriteX 12142 65534 1 1
QUERY_FILE_INFORMATION 12142
WriteX 12142 0 65471 65471
WriteX 12142 65471 64 64
WriteX 12142 65535 65471 65471
WriteX 12142 131006 64 64
WriteX 12142 131070 65471 65471
WriteX 12142 196541 64 64
WriteX 12142 196605 63491 63491
Close 12142
NTCreateX \clients\client1\~dmtmp\COREL\MAILBOX2.CPT 0x40 0x2 12143
WriteX 12143 65534 1 1
QUERY_FILE_INFORMATION 12143
WriteX 12143 0 65471 65471
WriteX 12143 65471 64 64
WriteX 12143 65535 65471 65471
WriteX 12143 131006 64 64
WriteX 12143 131070 65471 65471
WriteX 12143 196541 64 64
WriteX 12143 196605 63491 63491
Close 12143
NTCreateX \clients\client1\~dmtmp\COREL\TEAPOT2.CPT 0x40 0x2 12144
WriteX 12144 65534 1 1
QUERY_FILE_INFORMATION 12144
WriteX 12144 0 65471 65471
WriteX 12144 65471 64 64
WriteX 12144 65535 65471 65471
WriteX 12144 131006 64 64
WriteX 12144 131070 65471 65471
WriteX 12144 196541 64 64
WriteX 12144 196605 63491 63491
Close 12144
NTCreateX \clients\client1\~dmtmp\COREL\SIGN2.CPT 0x40 0x2 12145
WriteX 12145 65534 1 1
QUERY_FILE_INFORMATION 12145
WriteX 12145 0 65471 65471
WriteX 12145 65471 64 64
WriteX 12145 65535 65471 65471
WriteX 12145 131006 64 64
WriteX 12145 131070 65471 65471
WriteX 12145 196541 64 64
WriteX 12145 196605 63491 63491
Close 12145
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x2 12146
WriteX 12146 65534 1 1
QUERY_FILE_INFORMATION 12146
WriteX 12146 0 65471 65471
WriteX 12146 65471 64 64
WriteX 12146 65535 65471 65471
WriteX 12146 131006 64 64
WriteX 12146 131070 65471 65471
WriteX 12146 196541 64 64
WriteX 12146 196605 63491 63491
Close 12146
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x2 12147
WriteX 12147 65534 1 1
QUERY_FILE_INFORMATION 12147
WriteX 12147 0 65471 65471
WriteX 12147 65471 64 64
WriteX 12147 65535 65471 65471
WriteX 12147 131006 64 64
WriteX 12147 131070 65471 65471
WriteX 12147 196541 64 64
WriteX 12147 196605 63491 63491
Close 12147
NTCreateX \clients\client1\~dmtmp\COREL\ROSE.CPT 0x40 0x2 12148
WriteX 12148 65534 1 1
QUERY_FILE_INFORMATION 12148
WriteX 12148 0 65471 65471
WriteX 12148 65471 64 64
WriteX 12148 65535 65471 65471
WriteX 12148 131006 64 64
WriteX 12148 131070 65471 65471
WriteX 12148 196541 64 64
WriteX 12148 196605 63491 63491
Close 12148
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x2 12149
WriteX 12149 65534 1 1
QUERY_FILE_INFORMATION 12149
WriteX 12149 0 65471 65471
WriteX 12149 65471 64 64
WriteX 12149 65535 65471 65471
WriteX 12149 131006 64 64
WriteX 12149 131070 65471 65471
WriteX 12149 196541 64 64
WriteX 12149 196605 63491 63491
Close 12149
NTCreateX \clients\client1\~dmtmp\WORDPRO 0x1 0x2 12150
Close 12150
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x2 12151
WriteX 12151 65534 1 1
QUERY_FILE_INFORMATION 12151
WriteX 12151 0 65471 65471
WriteX 12151 65471 64 64
WriteX 12151 65535 65471 65471
WriteX 12151 131006 64 64
WriteX 12151 131070 65471 65471
WriteX 12151 196541 64 64
WriteX 12151 196605 63491 63491
Close 12151
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x2 12152
WriteX 12152 65534 1 1
QUERY_FILE_INFORMATION 12152
WriteX 12152 0 65471 65471
WriteX 12152 65471 64 64
WriteX 12152 65535 65471 65471
WriteX 12152 131006 64 64
WriteX 12152 131070 65471 65471
WriteX 12152 196541 64 64
WriteX 12152 196605 63491 63491
Close 12152
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x2 12153
WriteX 12153 65534 1 1
QUERY_FILE_INFORMATION 12153
WriteX 12153 0 65471 65471
WriteX 12153 65471 64 64
WriteX 12153 65535 65471 65471
WriteX 12153 131006 64 64
WriteX 12153 131070 65471 65471
WriteX 12153 196541 64 64
WriteX 12153 196605 63491 63491
Close 12153
NTCreateX \clients\client1\~dmtmp\PM 0x1 0x2 12154
Close 12154
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x2 12155
WriteX 12155 65534 1 1
QUERY_FILE_INFORMATION 12155
WriteX 12155 0 65471 65471
WriteX 12155 65471 64 64
WriteX 12155 65535 65471 65471
WriteX 12155 131006 64 64
WriteX 12155 131070 65471 65471
WriteX 12155 196541 64 64
WriteX 12155 196605 63491 63491
Close 12155
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x2 12156
WriteX 12156 65534 1 1
QUERY_FILE_INFORMATION 12156
WriteX 12156 0 65471 65471
WriteX 12156 65471 64 64
WriteX 12156 65535 65471 65471
WriteX 12156 131006 64 64
WriteX 12156 131070 65471 65471
WriteX 12156 196541 64 64
WriteX 12156 196605 63491 63491
Close 12156
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x2 12157
WriteX 12157 65534 1 1
QUERY_FILE_INFORMATION 12157
WriteX 12157 0 65471 65471
WriteX 12157 65471 64 64
WriteX 12157 65535 65471 65471
WriteX 12157 131006 64 64
WriteX 12157 131070 65471 65471
WriteX 12157 196541 64 64
WriteX 12157 196605 63491 63491
Close 12157
NTCreateX \clients\client1\~dmtmp\PARADOX 0x1 0x2 12158
Close 12158
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x2 12159
WriteX 12159 65534 1 1
QUERY_FILE_INFORMATION 12159
WriteX 12159 0 65471 65471
WriteX 12159 65471 64 64
WriteX 12159 65535 65471 65471
WriteX 12159 131006 64 64
WriteX 12159 131070 65471 65471
WriteX 12159 196541 64 64
WriteX 12159 196605 63491 63491
Close 12159
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x2 12160
WriteX 12160 65534 1 1
QUERY_FILE_INFORMATION 12160
WriteX 12160 0 65471 65471
WriteX 12160 65471 64 64
WriteX 12160 65535 65471 65471
WriteX 12160 131006 64 64
WriteX 12160 131070 65471 65471
WriteX 12160 196541 64 64
WriteX 12160 196605 63491 63491
Close 12160
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x2 12161
WriteX 12161 65534 1 1
QUERY_FILE_INFORMATION 12161
WriteX 12161 0 65471 65471
WriteX 12161 65471 64 64
WriteX 12161 65535 65471 65471
WriteX 12161 131006 64 64
WriteX 12161 131070 65471 65471
WriteX 12161 196541 64 64
WriteX 12161 196605 63491 63491
Close 12161
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x2 12162
WriteX 12162 65534 1 1
QUERY_FILE_INFORMATION 12162
WriteX 12162 0 65471 65471
WriteX 12162 65471 64 64
WriteX 12162 65535 65471 65471
WriteX 12162 131006 64 64
WriteX 12162 131070 65471 65471
WriteX 12162 196541 64 64
WriteX 12162 196605 63491 63491
Close 12162
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x2 12163
WriteX 12163 65534 1 1
QUERY_FILE_INFORMATION 12163
WriteX 12163 0 65471 65471
WriteX 12163 65471 64 64
WriteX 12163 65535 65471 65471
WriteX 12163 131006 64 64
WriteX 12163 131070 65471 65471
WriteX 12163 196541 64 64
WriteX 12163 196605 63491 63491
Close 12163
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x2 12164
WriteX 12164 65534 1 1
QUERY_FILE_INFORMATION 12164
WriteX 12164 0 65471 65471
WriteX 12164 65471 64 64
WriteX 12164 65535 65471 65471
WriteX 12164 131006 64 64
WriteX 12164 131070 65471 65471
WriteX 12164 196541 64 64
WriteX 12164 196605 63491 63491
Close 12164
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x2 12165
WriteX 12165 65534 1 1
QUERY_FILE_INFORMATION 12165
WriteX 12165 0 65471 65471
WriteX 12165 65471 64 64
WriteX 12165 65535 65471 65471
WriteX 12165 131006 64 64
WriteX 12165 131070 65471 65471
WriteX 12165 196541 64 64
WriteX 12165 196605 63491 63491
Close 12165
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x2 12166
WriteX 12166 65534 1 1
QUERY_FILE_INFORMATION 12166
WriteX 12166 0 65471 65471
WriteX 12166 65471 64 64
WriteX 12166 65535 65471 65471
WriteX 12166 131006 64 64
WriteX 12166 131070 65471 65471
WriteX 12166 196541 64 64
WriteX 12166 196605 63491 63491
Close 12166
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x2 12167
WriteX 12167 65534 1 1
QUERY_FILE_INFORMATION 12167
WriteX 12167 0 65471 65471
WriteX 12167 65471 64 64
WriteX 12167 65535 65471 65471
WriteX 12167 131006 64 64
WriteX 12167 131070 65471 65471
WriteX 12167 196541 64 64
WriteX 12167 196605 63491 63491
Close 12167
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x2 12168
WriteX 12168 65534 1 1
QUERY_FILE_INFORMATION 12168
WriteX 12168 0 65471 65471
WriteX 12168 65471 64 64
WriteX 12168 65535 65471 65471
WriteX 12168 131006 64 64
WriteX 12168 131070 65471 65471
WriteX 12168 196541 64 64
WriteX 12168 196605 63491 63491
Close 12168
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x2 12169
WriteX 12169 65534 1 1
QUERY_FILE_INFORMATION 12169
WriteX 12169 0 65471 65471
WriteX 12169 65471 64 64
WriteX 12169 65535 65471 65471
WriteX 12169 131006 64 64
WriteX 12169 131070 65471 65471
WriteX 12169 196541 64 64
WriteX 12169 196605 63491 63491
Close 12169
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x2 12170
WriteX 12170 65534 1 1
QUERY_FILE_INFORMATION 12170
WriteX 12170 0 65471 65471
WriteX 12170 65471 64 64
WriteX 12170 65535 65471 65471
WriteX 12170 131006 64 64
WriteX 12170 131070 65471 65471
WriteX 12170 196541 64 64
WriteX 12170 196605 63491 63491
Close 12170
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x2 12171
WriteX 12171 65534 1 1
QUERY_FILE_INFORMATION 12171
WriteX 12171 0 65471 65471
WriteX 12171 65471 64 64
WriteX 12171 65535 65471 65471
WriteX 12171 131006 64 64
WriteX 12171 131070 65471 65471
WriteX 12171 196541 64 64
WriteX 12171 196605 63491 63491
Close 12171
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x2 12172
WriteX 12172 65534 1 1
QUERY_FILE_INFORMATION 12172
WriteX 12172 0 65471 65471
WriteX 12172 65471 64 64
WriteX 12172 65535 65471 65471
WriteX 12172 131006 64 64
WriteX 12172 131070 65471 65471
WriteX 12172 196541 64 64
WriteX 12172 196605 63491 63491
Close 12172
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x2 12173
WriteX 12173 65534 1 1
QUERY_FILE_INFORMATION 12173
WriteX 12173 0 65471 65471
WriteX 12173 65471 64 64
WriteX 12173 65535 65471 65471
WriteX 12173 131006 64 64
WriteX 12173 131070 65471 65471
WriteX 12173 196541 64 64
WriteX 12173 196605 63491 63491
Close 12173
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x2 12174
WriteX 12174 65534 1 1
QUERY_FILE_INFORMATION 12174
WriteX 12174 0 65471 65471
WriteX 12174 65471 64 64
WriteX 12174 65535 65471 65471
WriteX 12174 131006 64 64
WriteX 12174 131070 65471 65471
WriteX 12174 196541 64 64
WriteX 12174 196605 63491 63491
Close 12174
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x2 12175
WriteX 12175 65534 1 1
QUERY_FILE_INFORMATION 12175
WriteX 12175 0 65471 65471
WriteX 12175 65471 64 64
WriteX 12175 65535 65471 65471
WriteX 12175 131006 64 64
WriteX 12175 131070 65471 65471
WriteX 12175 196541 64 64
WriteX 12175 196605 63491 63491
Close 12175
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.TV 0x40 0x2 12176
WriteX 12176 65534 1 1
QUERY_FILE_INFORMATION 12176
WriteX 12176 0 65471 65471
WriteX 12176 65471 64 64
WriteX 12176 65535 65471 65471
WriteX 12176 131006 64 64
WriteX 12176 131070 65471 65471
WriteX 12176 196541 64 64
WriteX 12176 196605 63491 63491
Close 12176
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x2 12177
WriteX 12177 65534 1 1
QUERY_FILE_INFORMATION 12177
WriteX 12177 0 65471 65471
WriteX 12177 65471 64 64
WriteX 12177 65535 65471 65471
WriteX 12177 131006 64 64
WriteX 12177 131070 65471 65471
WriteX 12177 196541 64 64
WriteX 12177 196605 63491 63491
Close 12177
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FSL 0x40 0x2 12178
WriteX 12178 65534 1 1
QUERY_FILE_INFORMATION 12178
WriteX 12178 0 65471 65471
WriteX 12178 65471 64 64
WriteX 12178 65535 65471 65471
WriteX 12178 131006 64 64
WriteX 12178 131070 65471 65471
WriteX 12178 196541 64 64
WriteX 12178 196605 63491 63491
Close 12178
NTCreateX \clients\client1\~dmtmp\ACCESS 0x1 0x2 12179
Close 12179
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.MDB 0x40 0x2 12180
WriteX 12180 65534 1 1
QUERY_FILE_INFORMATION 12180
WriteX 12180 0 65471 65471
WriteX 12180 65471 64 64
WriteX 12180 65535 65471 65471
WriteX 12180 131006 64 64
WriteX 12180 131070 65471 65471
WriteX 12180 196541 64 64
WriteX 12180 196605 63491 63491
Close 12180
NTCreateX \clients\client1\~dmtmp\SEED 0x1 0x2 12181
Close 12181
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x2 12182
WriteX 12182 65534 1 1
QUERY_FILE_INFORMATION 12182
WriteX 12182 0 65471 65471
WriteX 12182 65471 64 64
WriteX 12182 65535 65471 65471
WriteX 12182 131006 64 64
WriteX 12182 131070 65471 65471
WriteX 12182 196541 64 64
WriteX 12182 196605 65471 65471
WriteX 12182 262076 64 64
WriteX 12182 262140 65471 65471
WriteX 12182 327611 64 64
WriteX 12182 327675 5 5
Close 12182
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x2 12183
WriteX 12183 65534 1 1
QUERY_FILE_INFORMATION 12183
WriteX 12183 0 65471 65471
WriteX 12183 65471 64 64
WriteX 12183 65535 65471 65471
WriteX 12183 131006 64 64
WriteX 12183 131070 65471 65471
WriteX 12183 196541 64 64
WriteX 12183 196605 65471 65471
WriteX 12183 262076 64 64
WriteX 12183 262140 65471 65471
WriteX 12183 327611 64 64
WriteX 12183 327675 65471 65471
WriteX 12183 393146 64 64
WriteX 12183 393210 65471 65471
WriteX 12183 458681 64 64
WriteX 12183 458745 65471 65471
WriteX 12183 524216 64 64
WriteX 12183 524280 65471 65471
WriteX 12183 589751 64 64
WriteX 12183 589815 65471 65471
WriteX 12183 655286 64 64
WriteX 12183 655350 65471 65471
WriteX 12183 720821 64 64
WriteX 12183 720885 65471 65471
WriteX 12183 786356 64 64
WriteX 12183 786420 65471 65471
WriteX 12183 851891 64 64
WriteX 12183 851955 65471 65471
WriteX 12183 917426 64 64
WriteX 12183 917490 65471 65471
WriteX 12183 982961 64 64
WriteX 12183 983025 65471 65471
WriteX 12183 1048496 64 64
WriteX 12183 1048560 16 16
Close 12183
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x2 12184
WriteX 12184 65534 1 1
QUERY_FILE_INFORMATION 12184
WriteX 12184 0 65471 65471
WriteX 12184 65471 64 64
WriteX 12184 65535 65471 65471
WriteX 12184 131006 64 64
WriteX 12184 131070 65471 65471
WriteX 12184 196541 64 64
WriteX 12184 196605 65471 65471
WriteX 12184 262076 64 64
WriteX 12184 262140 65471 65471
WriteX 12184 327611 64 64
WriteX 12184 327675 65471 65471
WriteX 12184 393146 64 64
WriteX 12184 393210 65471 65471
WriteX 12184 458681 64 64
WriteX 12184 458745 65471 65471
WriteX 12184 524216 64 64
WriteX 12184 524280 65471 65471
WriteX 12184 589751 64 64
WriteX 12184 589815 65471 65471
WriteX 12184 655286 64 64
WriteX 12184 655350 65471 65471
WriteX 12184 720821 64 64
WriteX 12184 720885 65471 65471
WriteX 12184 786356 64 64
WriteX 12184 786420 65471 65471
WriteX 12184 851891 64 64
WriteX 12184 851955 65471 65471
WriteX 12184 917426 64 64
WriteX 12184 917490 65471 65471
WriteX 12184 982961 64 64
WriteX 12184 983025 65471 65471
WriteX 12184 1048496 64 64
WriteX 12184 1114094 1 1
QUERY_FILE_INFORMATION 12184
WriteX 12184 1048560 65471 65471
WriteX 12184 1114031 64 64
WriteX 12184 1114095 65471 65471
WriteX 12184 1179566 64 64
WriteX 12184 1179630 65471 65471
WriteX 12184 1245101 64 64
WriteX 12184 1245165 65471 65471
WriteX 12184 1310636 64 64
WriteX 12184 1310700 65471 65471
WriteX 12184 1376171 64 64
WriteX 12184 1376235 65471 65471
WriteX 12184 1441706 64 64
WriteX 12184 1441770 65471 65471
WriteX 12184 1507241 64 64
WriteX 12184 1507305 65471 65471
WriteX 12184 1572776 64 64
WriteX 12184 1572840 65471 65471
WriteX 12184 1638311 64 64
WriteX 12184 1638375 65471 65471
WriteX 12184 1703846 64 64
WriteX 12184 1703910 65471 65471
WriteX 12184 1769381 64 64
WriteX 12184 1769445 65471 65471
WriteX 12184 1834916 64 64
WriteX 12184 1834980 32796 32796
Close 12184
QUERY_PATH_INFORMATION \clients\client1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 12185
Close 12185
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 12186
QUERY_FILE_INFORMATION 12186
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.~TS
QUERY_FILE_INFORMATION 12186
QUERY_FILE_INFORMATION 12186
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 12187
QUERY_FILE_INFORMATION 12187
QUERY_FILE_INFORMATION 12187
QUERY_FILE_INFORMATION 12187
ReadX 12187 2156 24 24
ReadX 12187 2139 276 276
ReadX 12187 2136 14 14
ReadX 12187 2136 7 7
ReadX 12187 2138 12 12
ReadX 12187 2137 8 8
ReadX 12187 2135 15 15
ReadX 12187 0 16 16
ReadX 12187 16 2048 2048
ReadX 12187 2064 2048 2048
ReadX 12187 257 2048 2048
ReadX 12187 385 2048 2048
ReadX 12187 513 2048 2048
ReadX 12187 641 2048 2048
ReadX 12187 769 2048 2048
ReadX 12187 897 2048 2048
ReadX 12187 1025 2048 2048
ReadX 12187 1153 2048 2048
ReadX 12187 1281 2048 2048
ReadX 12187 1409 2048 2048
ReadX 12187 1537 408 408
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x2 12189
Close 12189
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 12191
WriteX 12191 15 1 1
QUERY_FILE_INFORMATION 12191
WriteX 12191 0 10575 10575
Flush 12191
Close 12191
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 12192
Close 12192
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 12193
QUERY_FILE_INFORMATION 12193
QUERY_FILE_INFORMATION 12193
QUERY_FILE_INFORMATION 12193
ReadX 12193 2157 24 24
ReadX 12193 2139 276 276
ReadX 12193 2137 14 14
ReadX 12193 2137 7 7
ReadX 12193 2139 12 12
ReadX 12193 2138 8 8
ReadX 12193 2136 15 15
Close 12187
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.~TS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 12194
Close 12194
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 12195
QUERY_FILE_INFORMATION 12195
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 12196
QUERY_FILE_INFORMATION 12196
ReadX 12196 0 512 512
ReadX 12196 512 512 512
ReadX 12196 1024 512 512
QUERY_FILE_INFORMATION 12196
QUERY_FILE_INFORMATION 12196
Close 12196
QUERY_FILE_INFORMATION 12195
ReadX 12195 0 24 24
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 12197
QUERY_FILE_INFORMATION 12197
ReadX 12197 0 512 512
ReadX 12197 512 512 512
ReadX 12197 1024 512 512
ReadX 12197 288 20 20
ReadX 12197 308 2084 2084
ReadX 12197 388 2084 2084
ReadX 12197 388 2084 2084
ReadX 12186 2157 1386 1386
ReadX 12197 2472 399 399
ReadX 12197 3072 1536 1536
ReadX 12197 544 149 149
ReadX 12197 693 485 485
Close 12197
ReadX 12186 2157 4096 4096
ReadX 12186 6253 4096 4096
ReadX 12186 10349 4096 4096
ReadX 12186 14445 4096 4096
ReadX 12186 18541 4096 4096
ReadX 12186 22637 256 256
ReadX 12186 22893 4096 4096
ReadX 12186 26989 4096 4096
ReadX 12186 31085 4096 4096
ReadX 12186 35181 4096 4096
ReadX 12186 39277 4096 4096
ReadX 12186 43373 4096 4096
ReadX 12186 47469 4096 4096
QUERY_FS_INFORMATION 259
ReadX 12186 2157 1024 1024
ReadX 12186 1667 4688 4688
ReadX 12186 6355 3516 3516
ReadX 12186 9871 16384 16384
ReadX 12186 26255 3771 3771
ReadX 12186 30026 2048 2048
ReadX 12186 32074 1024 1024
ReadX 12186 33098 6652 6652
ReadX 12186 39750 16384 16384
ReadX 12186 56134 10496 10496
ReadX 12186 66630 1784 1784
ReadX 12186 68414 90 90
ReadX 12186 68504 273 273
ReadX 12186 68777 1600 1600
ReadX 12186 70377 640 640
ReadX 12186 71017 1280 1280
ReadX 12186 72297 8464 8464
ReadX 12186 80761 158 158
ReadX 12186 80919 912 912
ReadX 12186 81831 1980 1980
ReadX 12186 83811 2256 2256
ReadX 12186 86067 400 400
ReadX 12186 86467 252 252
ReadX 12186 86719 42 42
ReadX 12186 86761 725 725
ReadX 12186 2009 512 512
ReadX 12186 3895 9 9
ReadX 12186 3781 46 46
ReadX 12186 4059 92 92
ReadX 12186 3781 92 92
ReadX 12186 3986 184 184
ReadX 12186 3987 16384 16384
ReadX 12186 3902 16384 16384
ReadX 12186 3781 10240 10240
ReadX 12186 3821 16384 16384
ReadX 12186 3891 935 935
ReadX 12186 4060 10240 10240
ReadX 12186 4059 184 184
ReadX 12186 256 184 184
ReadX 12186 256 1026 1026
ReadX 12186 3901 326 326
ReadX 12186 3899 652 652
ReadX 12186 256 2 2
ReadX 12186 258 4948 4948
Close 12186
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x2 12199
Close 12199
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x2 12201
WriteX 12201 4055 1 1
QUERY_FILE_INFORMATION 12201
WriteX 12201 0 65471 65471
WriteX 12201 65471 65 65
WriteX 12201 65536 65471 65471
WriteX 12201 131007 65 65
WriteX 12201 131072 65471 65471
WriteX 12201 196543 65 65
WriteX 12201 196608 65471 65471
WriteX 12201 262079 65 65
WriteX 12201 262144 65471 65471
WriteX 12201 327615 65 65
WriteX 12201 327680 65471 65471
WriteX 12201 393151 65 65
WriteX 12201 393216 65471 65471
WriteX 12201 458687 65 65
WriteX 12201 458752 65471 65471
WriteX 12201 524223 65 65
WriteX 12201 524288 65471 65471
WriteX 12201 589759 65 65
WriteX 12201 589824 35257 35257
Close 12201
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x2 12203
Close 12203
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x2 12205
WriteX 12205 4055 1 1
QUERY_FILE_INFORMATION 12205
WriteX 12205 0 65471 65471
WriteX 12205 65471 65 65
WriteX 12205 65536 65471 65471
WriteX 12205 131007 65 65
WriteX 12205 131072 65471 65471
WriteX 12205 196543 65 65
WriteX 12205 196608 65471 65471
WriteX 12205 262079 65 65
WriteX 12205 262144 65471 65471
WriteX 12205 327615 65 65
WriteX 12205 327680 65471 65471
WriteX 12205 393151 65 65
WriteX 12205 393216 65471 65471
WriteX 12205 458687 65 65
WriteX 12205 458752 65471 65471
WriteX 12205 524223 65 65
WriteX 12205 524288 65471 65471
WriteX 12205 589759 65 65
WriteX 12205 589824 57598 57598
Close 12205
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 12207
WriteX 12207 15 1 1
QUERY_FILE_INFORMATION 12207
WriteX 12207 0 12543 12543
Flush 12207
Close 12207
Close 12193
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 12208
Close 12208
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 12209
QUERY_FILE_INFORMATION 12209
QUERY_FILE_INFORMATION 12209
QUERY_FILE_INFORMATION 12209
ReadX 12209 288 24 24
ReadX 12209 287 276 276
ReadX 12209 286 14 14
ReadX 12209 286 7 7
ReadX 12209 287 12 12
ReadX 12209 287 8 8
ReadX 12209 286 15 15
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 12210
Close 12210
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 12211
QUERY_FILE_INFORMATION 12211
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS
QUERY_FILE_INFORMATION 12211
QUERY_FILE_INFORMATION 12211
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 12212
QUERY_FILE_INFORMATION 12212
QUERY_FILE_INFORMATION 12212
QUERY_FILE_INFORMATION 12212
ReadX 12212 1938 24 24
ReadX 12212 1920 276 276
ReadX 12212 1918 14 14
ReadX 12212 1918 7 7
ReadX 12212 1919 12 12
ReadX 12212 1919 8 8
ReadX 12212 1917 15 15
ReadX 12212 0 16 16
ReadX 12212 16 2048 2048
ReadX 12212 2064 2048 2048
ReadX 12212 257 2048 2048
ReadX 12212 385 2048 2048
ReadX 12212 513 2048 2048
ReadX 12212 641 2048 2048
ReadX 12212 769 2048 2048
ReadX 12212 897 2048 2048
ReadX 12212 1025 2048 2048
ReadX 12212 1153 1385 1385
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x2 12214
Close 12214
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 12216
WriteX 12216 15 1 1
QUERY_FILE_INFORMATION 12216
WriteX 12216 0 11588 11588
Flush 12216
Close 12216
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 12217
Close 12217
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 12218
QUERY_FILE_INFORMATION 12218
QUERY_FILE_INFORMATION 12218
QUERY_FILE_INFORMATION 12218
ReadX 12218 1909 24 24
ReadX 12218 1892 276 276
ReadX 12218 1889 14 14
ReadX 12218 1889 7 7
ReadX 12218 1891 12 12
ReadX 12218 1890 8 8
ReadX 12218 1888 15 15
Close 12212
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 12220
WriteX 12220 15 1 1
QUERY_FILE_INFORMATION 12220
WriteX 12220 0 11615 11615
Flush 12220
Close 12220
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Close 12218
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 12221
Close 12221
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 12222
QUERY_FILE_INFORMATION 12222
QUERY_FILE_INFORMATION 12222
QUERY_FILE_INFORMATION 12222
ReadX 12222 1947 24 24
ReadX 12222 1929 276 276
ReadX 12222 1927 14 14
ReadX 12222 1927 7 7
ReadX 12222 1929 12 12
ReadX 12222 1928 8 8
ReadX 12222 1926 15 15
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x2 12224
Close 12224
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x2 12226
WriteX 12226 4088 1 1
QUERY_FILE_INFORMATION 12226
WriteX 12226 0 65471 65471
WriteX 12226 65471 65 65
WriteX 12226 65536 16050 16050
Close 12226
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12211 1939 64 64
ReadX 12211 128 248 248
ReadX 12211 128 568 568
ReadX 12211 3872 1536 1536
ReadX 12211 3456 2560 2560
ReadX 12211 3136 512 512
ReadX 12211 2880 4096 4096
ReadX 12211 3264 3072 3072
ReadX 12211 320 4096 4096
ReadX 12211 1024 4096 4096
ReadX 12211 3616 4096 4096
ReadX 12211 1939 64 64
ReadX 12211 128 248 248
ReadX 12211 128 608 608
ReadX 12211 2858 1024 1024
ReadX 12211 2810 4096 4096
ReadX 12211 2826 4096 4096
ReadX 12211 2580 2048 2048
ReadX 12211 2800 2560 2560
ReadX 12211 2100 4096 4096
ReadX 12211 2084 4096 4096
ReadX 12211 868 4096 4096
ReadX 12211 2324 4096 4096
ReadX 12211 884 4096 4096
ReadX 12211 2604 1024 1024
ReadX 12211 580 4096 4096
ReadX 12211 596 4096 4096
ReadX 12211 2752 4096 4096
ReadX 12211 2842 1024 1024
ReadX 12211 660 4096 4096
ReadX 12211 2720 4096 4096
ReadX 12211 2736 4096 4096
ReadX 12211 628 4096 4096
ReadX 12211 2704 4096 4096
ReadX 12211 1556 4096 4096
ReadX 12211 576 4096 4096
ReadX 12211 3168 1536 1536
ReadX 12211 832 4096 4096
ReadX 12211 1088 4096 4096
ReadX 12211 1344 4096 4096
ReadX 12211 1600 4096 4096
ReadX 12211 1856 4096 4096
ReadX 12211 2112 4096 4096
ReadX 12211 1892 4096 4096
ReadX 12211 820 4096 4096
ReadX 12211 788 4096 4096
ReadX 12211 1604 4096 4096
ReadX 12211 3648 4096 4096
ReadX 12211 2608 4096 4096
ReadX 12211 548 4096 4096
ReadX 12211 740 4096 4096
ReadX 12211 1344 4096 4096
ReadX 12211 3392 4096 4096
ReadX 12211 3904 4096 4096
ReadX 12211 644 4096 4096
ReadX 12211 676 4096 4096
ReadX 12211 2688 4096 4096
ReadX 12211 320 4096 4096
ReadX 12211 900 4096 4096
ReadX 12211 1908 4096 4096
ReadX 12211 852 4096 4096
ReadX 12211 724 4096 4096
ReadX 12211 2292 4096 4096
ReadX 12211 612 4096 4096
ReadX 12211 388 4096 4096
ReadX 12211 2368 4096 4096
ReadX 12211 2624 4096 4096
ReadX 12211 500 4096 4096
ReadX 12211 356 4096 4096
ReadX 12211 1024 4096 4096
ReadX 12211 576 4096 4096
ReadX 12211 340 4096 4096
ReadX 12211 420 4096 4096
ReadX 12211 1600 4096 4096
ReadX 12211 404 4096 4096
ReadX 12211 1428 4096 4096
ReadX 12211 2656 4096 4096
ReadX 12211 2624 4096 4096
ReadX 12211 452 4096 4096
ReadX 12211 692 4096 4096
ReadX 12211 564 4096 4096
ReadX 12211 372 4096 4096
ReadX 12211 468 4096 4096
ReadX 12211 484 4096 4096
ReadX 12211 1088 4096 4096
ReadX 12211 1924 4096 4096
ReadX 12211 2768 4096 4096
ReadX 12211 832 4096 4096
ReadX 12211 836 4096 4096
ReadX 12211 1856 4096 4096
ReadX 12211 2640 4096 4096
ReadX 12211 436 4096 4096
ReadX 12211 1828 4096 4096
ReadX 12211 804 4096 4096
ReadX 12211 1860 4096 4096
ReadX 12211 1812 4096 4096
ReadX 12211 756 4096 4096
ReadX 12211 1636 4096 4096
ReadX 12211 772 4096 4096
ReadX 12211 2036 4096 4096
ReadX 12211 1220 4096 4096
ReadX 12211 1652 4096 4096
ReadX 12211 2588 4096 4096
ReadX 12211 916 4096 4096
ReadX 12211 260 4096 4096
ReadX 12211 932 4096 4096
ReadX 12211 2624 4096 4096
ReadX 12211 308 4096 4096
ReadX 12211 292 4096 4096
ReadX 12211 1140 4096 4096
ReadX 12211 276 4096 4096
ReadX 12211 2020 4096 4096
ReadX 12211 2880 4096 4096
ReadX 12211 516 4096 4096
ReadX 12211 1844 4096 4096
ReadX 12211 1124 4096 4096
ReadX 12211 3136 4096 4096
ReadX 12211 324 4096 4096
ReadX 12211 1156 4096 4096
ReadX 12211 1172 4096 4096
ReadX 12211 2112 4096 4096
ReadX 12211 2368 4096 4096
ReadX 12211 964 4096 4096
ReadX 12211 980 4096 4096
ReadX 12211 1012 4096 4096
ReadX 12211 532 4096 4096
ReadX 12211 1876 4096 4096
QUERY_FS_INFORMATION 259
ReadX 12211 1620 4096 4096
ReadX 12211 1604 4096 4096
ReadX 12211 2116 4096 4096
ReadX 12211 2132 4096 4096
ReadX 12211 2148 4096 4096
ReadX 12211 2276 4096 4096
ReadX 12211 1540 4096 4096
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x2 12228
Close 12228
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x2 12230
QUERY_FILE_INFORMATION 12195
WriteX 12230 4088 1 1
QUERY_FILE_INFORMATION 12230
QUERY_FILE_INFORMATION 12195
Close 12195
WriteX 12230 0 65471 65471
WriteX 12230 65471 65 65
WriteX 12230 65536 64850 64850
Close 12230
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 12232
WriteX 12232 15 1 1
QUERY_FILE_INFORMATION 12232
ReadX 12211 2068 4096 4096
ReadX 12211 1588 4096 4096
ReadX 12211 1572 4096 4096
WriteX 12232 0 18630 18630
Flush 12232
Close 12232
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Close 12222
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 12233
Close 12233
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 12234
QUERY_FILE_INFORMATION 12234
QUERY_FILE_INFORMATION 12234
QUERY_FILE_INFORMATION 12234
ReadX 12234 661 24 24
ReadX 12234 659 356 356
ReadX 12234 659 14 14
ReadX 12234 659 7 7
ReadX 12234 659 12 12
ReadX 12234 659 8 8
ReadX 12234 659 15 15
ReadX 12234 659 16 16
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS
ReadX 12211 612 4096 4096
ReadX 12211 564 4096 4096
ReadX 12211 1876 4096 4096
ReadX 12211 628 4096 4096
ReadX 12211 740 4096 4096
ReadX 12211 724 4096 4096
ReadX 12211 644 4096 4096
ReadX 12211 2324 4096 4096
ReadX 12211 660 4096 4096
ReadX 12211 852 4096 4096
ReadX 12211 868 4096 4096
Close 12234
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS
Close 12209
ReadX 12211 2368 4096 4096
ReadX 12211 1024 4096 4096
ReadX 12211 320 4096 4096
ReadX 12211 580 4096 4096
ReadX 12211 3136 512 512
ReadX 12211 2880 4096 4096
Close 12211
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 12235
WriteX 12235 0 65471 65471
WriteX 12235 65471 63 63
WriteX 12235 65534 65471 65471
WriteX 12235 131005 63 63
Close 12235
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 12236
WriteX 12236 0 65471 65471
WriteX 12236 65471 63 63
WriteX 12236 65534 65471 65471
WriteX 12236 131005 63 63
WriteX 12236 131068 65471 65471
WriteX 12236 196539 63 63
WriteX 12236 196602 65471 65471
WriteX 12236 262073 63 63
Close 12236
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 12237
WriteX 12237 0 65471 65471
WriteX 12237 65471 63 63
WriteX 12237 65534 65471 65471
WriteX 12237 131005 63 63
WriteX 12237 131068 65471 65471
WriteX 12237 196539 63 63
WriteX 12237 196602 65471 65471
WriteX 12237 262073 63 63
WriteX 12237 262136 65471 65471
WriteX 12237 327607 63 63
WriteX 12237 327670 65471 65471
WriteX 12237 393141 63 63
WriteX 12237 393204 65471 65471
WriteX 12237 458675 63 63
WriteX 12237 458738 65471 65471
WriteX 12237 524209 63 63
Close 12237
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX
FIND_FIRST \clients\client1\~dmtmp\*
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12238
Close 12238
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12239
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12239 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12240
ReadX 12240 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12241
ReadX 12241 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12242
ReadX 12242 0 511 511
ReadX 12239 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 12239
Close 12240
Close 12241
Close 12242
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12243
ReadX 12243 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12244
ReadX 12244 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12245
ReadX 12245 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12246
ReadX 12246 0 511 511
ReadX 12243 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S3CF99.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.DB 0x40 0x2 12247
FIND_FIRST \clients\client1\~dmtmp\*
Close 12247
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.DB 0x40 0x1 12248
QUERY_FILE_INFORMATION 12248
WriteX 12248 2047 1 1
QUERY_FILE_INFORMATION 12248
WriteX 12248 0 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x2 12249
Close 12249
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x1 12250
WriteX 12250 52 1 1
QUERY_FILE_INFORMATION 12250
WriteX 12250 0 53 53
WriteX 12250 53 28 28
WriteX 12250 81 4 4
WriteX 12250 85 28 28
WriteX 12250 113 38 38
WriteX 12250 151 28 28
WriteX 12250 179 2 2
WriteX 12250 181 28 28
WriteX 12250 209 3 3
WriteX 12250 212 279 279
WriteX 12250 9 4 4
Close 12250
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x1 12251
ReadX 12251 0 53 53
ReadX 12251 53 28 28
ReadX 12251 81 4 4
ReadX 12251 85 28 28
ReadX 12251 113 38 38
ReadX 12251 151 28 28
ReadX 12251 179 2 2
ReadX 12251 181 28 28
ReadX 12251 209 3 3
Close 12251
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
Close 12243
Close 12244
Close 12245
Close 12246
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12252
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12252 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12253
ReadX 12253 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12254
ReadX 12254 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12255
ReadX 12255 0 511 511
ReadX 12252 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x2 12257
Close 12257
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12258
WriteX 12258 52 1 1
QUERY_FILE_INFORMATION 12258
WriteX 12258 0 53 53
WriteX 12258 53 28 28
WriteX 12258 81 28 28
WriteX 12258 109 28 28
WriteX 12258 137 28 28
WriteX 12258 165 28 28
WriteX 12258 193 28 28
WriteX 12258 221 28 28
WriteX 12258 249 4 4
WriteX 12258 253 4 4
WriteX 12258 257 4 4
WriteX 12258 261 28 28
WriteX 12258 289 2 2
WriteX 12258 291 2 2
WriteX 12258 293 2 2
WriteX 12258 295 248 248
WriteX 12258 9 4 4
Close 12258
Close 12252
Close 12253
Close 12254
Close 12255
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12259
ReadX 12259 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12260
ReadX 12260 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12261
ReadX 12261 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12262
ReadX 12262 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12263
ReadX 12263 0 53 53
ReadX 12263 53 28 28
ReadX 12263 81 28 28
ReadX 12263 109 28 28
ReadX 12263 137 28 28
ReadX 12263 165 28 28
ReadX 12263 193 28 28
ReadX 12263 221 28 28
ReadX 12263 249 4 4
ReadX 12263 253 4 4
ReadX 12263 257 4 4
ReadX 12263 261 28 28
ReadX 12263 289 2 2
ReadX 12263 291 2 2
ReadX 12263 293 2 2
Close 12263
ReadX 12259 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 12259
Close 12260
Close 12261
Close 12262
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.VAL
Unlink \clients\client1\~dmtmp\PARADOX\__S31.VAL
Close 12248
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
Unlink \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12264
Close 12264
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12265
ReadX 12265 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12266
ReadX 12266 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12267
ReadX 12267 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12268
ReadX 12268 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12269
ReadX 12269 0 53 53
ReadX 12269 53 28 28
ReadX 12269 81 28 28
ReadX 12269 109 28 28
ReadX 12269 137 28 28
ReadX 12269 165 28 28
ReadX 12269 193 28 28
ReadX 12269 221 28 28
ReadX 12269 249 4 4
ReadX 12269 253 4 4
ReadX 12269 257 4 4
ReadX 12269 261 28 28
ReadX 12269 289 2 2
ReadX 12269 291 2 2
ReadX 12269 293 2 2
Close 12269
ReadX 12265 2048 2048 2048
Close 12265
Close 12266
Close 12267
Close 12268
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12270
ReadX 12270 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12271
ReadX 12271 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12272
ReadX 12272 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12273
ReadX 12273 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12274
ReadX 12274 0 53 53
ReadX 12274 53 28 28
ReadX 12274 81 28 28
ReadX 12274 109 28 28
ReadX 12274 137 28 28
ReadX 12274 165 28 28
ReadX 12274 193 28 28
ReadX 12274 221 28 28
ReadX 12274 249 4 4
ReadX 12274 253 4 4
ReadX 12274 257 4 4
ReadX 12274 261 28 28
ReadX 12274 289 2 2
ReadX 12274 291 2 2
ReadX 12274 293 2 2
Close 12274
ReadX 12270 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x2 12278
FIND_FIRST \clients\client1\~dmtmp\*
Close 12278
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 12279
QUERY_FILE_INFORMATION 12279
WriteX 12279 2047 1 1
QUERY_FILE_INFORMATION 12279
WriteX 12279 0 2048 2048
Close 12279
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 12280
ReadX 12280 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
Close 12280
Close 12270
Close 12271
Close 12272
Close 12273
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 12281
ReadX 12281 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
WriteX 12281 4095 1 1
QUERY_FILE_INFORMATION 12281
WriteX 12281 2048 2048 2048
QUERY_FILE_INFORMATION 12281
Flush 12281
WriteX 12281 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12282
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12282 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12283
ReadX 12283 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12284
ReadX 12284 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12285
ReadX 12285 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12286
ReadX 12286 0 53 53
ReadX 12286 53 28 28
ReadX 12286 81 28 28
ReadX 12286 109 28 28
ReadX 12286 137 28 28
ReadX 12286 165 28 28
ReadX 12286 193 28 28
ReadX 12286 221 28 28
ReadX 12286 249 4 4
ReadX 12286 253 4 4
ReadX 12286 257 4 4
ReadX 12286 261 28 28
ReadX 12286 289 2 2
ReadX 12286 291 2 2
ReadX 12286 293 2 2
Close 12286
ReadX 12282 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x2 12290
FIND_FIRST \clients\client1\~dmtmp\*
Close 12290
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 12291
QUERY_FILE_INFORMATION 12291
WriteX 12291 2047 1 1
QUERY_FILE_INFORMATION 12291
WriteX 12291 0 2048 2048
Close 12291
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 12292
ReadX 12292 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x2 12296
Close 12296
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 12297
QUERY_FILE_INFORMATION 12297
WriteX 12297 2047 1 1
QUERY_FILE_INFORMATION 12297
WriteX 12297 0 2048 2048
Close 12297
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 12298
ReadX 12298 0 511 511
ReadX 12282 384 2048 2048
ReadX 12282 768 16384 16384
ReadX 12282 1792 14336 14336
Close 12298
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 12299
ReadX 12299 0 511 511
Close 12299
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 12301
Close 12301
Unlink \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB
WriteX 12292 4095 1 1
QUERY_FILE_INFORMATION 12292
WriteX 12292 2048 2048 2048
WriteX 12292 0 88 88
Close 12292
WriteX 12282 1152 2048 2048
WriteX 12282 1408 6144 6144
WriteX 12282 1920 2048 2048
WriteX 12282 0 88 88
Close 12282
WriteX 12283 0 88 88
Close 12283
WriteX 12284 0 88 88
Close 12284
Close 12285
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 12302
ReadX 12302 0 511 511
ReadX 12302 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\CHANGED.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 12302
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\TIMECHG 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\TIMECHG 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12303
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12303 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12304
ReadX 12304 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12305
ReadX 12305 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12306
ReadX 12306 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12307
ReadX 12307 0 53 53
ReadX 12307 53 28 28
ReadX 12307 81 28 28
ReadX 12307 109 28 28
ReadX 12307 137 28 28
ReadX 12307 165 28 28
ReadX 12307 193 28 28
ReadX 12307 221 28 28
ReadX 12307 249 4 4
ReadX 12307 253 4 4
ReadX 12307 257 4 4
ReadX 12307 261 28 28
ReadX 12307 289 2 2
ReadX 12307 291 2 2
ReadX 12307 293 2 2
Close 12307
ReadX 12303 2048 2048 2048
Close 12303
Close 12304
Close 12305
Close 12306
Close 12281
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 12308
QUERY_FILE_INFORMATION 12308
Close 12308
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
Unlink \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12309
Close 12309
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12310
ReadX 12310 0 511 511
ReadX 12310 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12311
ReadX 12311 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12312
ReadX 12312 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12313
ReadX 12313 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12314
ReadX 12314 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12315
ReadX 12315 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12316
ReadX 12316 0 53 53
ReadX 12316 53 2 2
ReadX 12316 55 2 2
ReadX 12316 57 184 184
ReadX 12316 241 298 298
Close 12316
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12317
ReadX 12317 0 41 41
ReadX 12310 2048 2048 2048
Close 12317
Close 12310
Close 12311
Close 12314
Close 12315
Close 12312
Close 12313
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12318
ReadX 12318 0 511 511
ReadX 12318 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12319
ReadX 12319 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12320
ReadX 12320 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12321
ReadX 12321 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12322
ReadX 12322 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12323
ReadX 12323 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12324
ReadX 12324 0 53 53
ReadX 12324 53 2 2
ReadX 12324 55 2 2
ReadX 12324 57 184 184
ReadX 12324 241 298 298
Close 12324
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12325
ReadX 12325 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12326
ReadX 12326 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12327
ReadX 12327 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12328
ReadX 12328 0 511 511
ReadX 12327 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12329
ReadX 12329 0 53 53
ReadX 12329 53 2 2
ReadX 12329 55 480 480
ReadX 12329 535 2 2
Close 12329
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12330
ReadX 12330 0 41 41
ReadX 12318 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x2 12334
FIND_FIRST \clients\client1\~dmtmp\*
Close 12334
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 12335
QUERY_FILE_INFORMATION 12335
WriteX 12335 2047 1 1
QUERY_FILE_INFORMATION 12335
WriteX 12335 0 2048 2048
Close 12335
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 12336
ReadX 12336 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Close 12336
Close 12325
Close 12326
Close 12327
Close 12328
Close 12330
Close 12318
Close 12319
Close 12322
Close 12323
Close 12320
Close 12321
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 12337
ReadX 12337 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12338
Close 12338
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12339
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12339 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12340
ReadX 12340 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12341
ReadX 12341 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12342
ReadX 12342 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12343
ReadX 12343 0 53 53
ReadX 12343 53 2 2
ReadX 12343 55 480 480
ReadX 12343 535 2 2
Close 12343
ReadX 12339 2048 2048 2048
Close 12339
Close 12340
Close 12341
Close 12342
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12344
ReadX 12344 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12345
ReadX 12345 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12346
ReadX 12346 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12347
ReadX 12347 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12348
ReadX 12348 0 53 53
ReadX 12348 53 2 2
ReadX 12348 55 480 480
ReadX 12348 535 2 2
Close 12348
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12349
ReadX 12349 0 511 511
ReadX 12349 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12350
ReadX 12350 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12351
ReadX 12351 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12352
ReadX 12352 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12353
ReadX 12353 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12354
ReadX 12354 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12355
ReadX 12355 0 41 41
ReadX 12349 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12356
ReadX 12356 0 53 53
ReadX 12356 53 2 2
ReadX 12356 55 2 2
ReadX 12356 57 184 184
ReadX 12356 241 298 298
Close 12356
ReadX 12344 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x2 12360
FIND_FIRST \clients\client1\~dmtmp\*
Close 12360
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 12361
QUERY_FILE_INFORMATION 12361
WriteX 12361 2047 1 1
QUERY_FILE_INFORMATION 12361
WriteX 12361 0 2048 2048
Close 12361
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 12362
ReadX 12362 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
Close 12362
Close 12355
Close 12349
Close 12350
Close 12353
Close 12354
Close 12351
Close 12352
Close 12344
Close 12345
Close 12346
Close 12347
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 12363
ReadX 12363 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
WriteX 12337 4095 1 1
QUERY_FILE_INFORMATION 12337
WriteX 12337 2048 2048 2048
QUERY_FILE_INFORMATION 12337
Flush 12337
WriteX 12337 0 88 88
WriteX 12363 4095 1 1
QUERY_FILE_INFORMATION 12363
WriteX 12363 2048 2048 2048
QUERY_FILE_INFORMATION 12363
Flush 12363
WriteX 12363 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12364
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12364 0 511 511
ReadX 12364 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12365
ReadX 12365 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12366
ReadX 12366 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12367
ReadX 12367 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12368
ReadX 12368 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12369
ReadX 12369 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12370
ReadX 12370 0 53 53
ReadX 12370 53 2 2
ReadX 12370 55 2 2
ReadX 12370 57 184 184
ReadX 12370 241 298 298
Close 12370
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12371
ReadX 12371 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12372
ReadX 12372 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12373
ReadX 12373 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12374
ReadX 12374 0 511 511
ReadX 12373 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12375
ReadX 12375 0 53 53
ReadX 12375 53 2 2
ReadX 12375 55 480 480
ReadX 12375 535 2 2
Close 12375
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12376
ReadX 12376 0 41 41
ReadX 12364 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12377
ReadX 12377 0 53 53
ReadX 12377 53 2 2
ReadX 12377 55 480 480
ReadX 12377 535 2 2
Close 12377
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12378
ReadX 12378 0 53 53
ReadX 12378 53 2 2
ReadX 12378 55 2 2
ReadX 12378 57 184 184
ReadX 12378 241 298 298
Close 12378
ReadX 12371 2048 2048 2048
ReadX 12372 2048 2048 2048
ReadX 12371 320 16384 16384
ReadX 12371 384 16384 16384
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x2 12379
FIND_FIRST \clients\client1\~dmtmp\*
Close 12379
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x1 12380
QUERY_FILE_INFORMATION 12380
WriteX 12380 4095 1 1
QUERY_FILE_INFORMATION 12380
WriteX 12380 0 4096 4096
Close 12380
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x1 12381
ReadX 12381 0 41 41
Close 12371
Close 12372
Close 12373
Close 12374
Close 12376
Close 12364
Close 12365
Close 12368
Close 12369
Close 12366
Close 12367
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x2 12382
Close 12382
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 12383
QUERY_FILE_INFORMATION 12383
WriteX 12383 4095 1 1
QUERY_FILE_INFORMATION 12383
WriteX 12383 0 4096 4096
Close 12383
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 12384
ReadX 12384 0 41 41
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.FAM 0x40 0x1 -1
QUERY_FILE_INFORMATION 12381
ReadX 12381 0 4096 4096
WriteX 12384 0 4096 4096
Close 12384
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 12386
ReadX 12386 0 41 41
Close 12381
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__QB4.MB
Unlink \clients\client1\~dmtmp\PARADOX\__QB4.MB
Close 12386
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__QB5.MB
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x200000 0x1 12387
Close 12387
Rename \clients\client1\~dmtmp\PARADOX\__QB5.MB \clients\client1\~dmtmp\PARADOX\ANSWER.MB
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.MB 0x40 0x1 12388
ReadX 12388 0 41 41
Close 12388
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x2 12389
Close 12389
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12390
QUERY_FILE_INFORMATION 12390
WriteX 12390 2047 1 1
QUERY_FILE_INFORMATION 12390
WriteX 12390 0 2048 2048
Close 12390
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12391
ReadX 12391 0 511 511
ReadX 12391 0 572 572
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.MB 0x40 0x1 12392
ReadX 12392 0 41 41
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 12392
Close 12391
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\CLASSROL 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12393
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12393 0 511 511
ReadX 12393 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12394
ReadX 12394 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12395
ReadX 12395 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12396
ReadX 12396 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12397
ReadX 12397 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12398
ReadX 12398 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12399
ReadX 12399 0 53 53
ReadX 12399 53 2 2
ReadX 12399 55 2 2
ReadX 12399 57 184 184
ReadX 12399 241 298 298
Close 12399
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12400
ReadX 12400 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12401
ReadX 12401 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12402
ReadX 12402 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12403
ReadX 12403 0 511 511
ReadX 12402 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12404
ReadX 12404 0 53 53
ReadX 12404 53 2 2
ReadX 12404 55 480 480
ReadX 12404 535 2 2
Close 12404
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12405
ReadX 12405 0 41 41
ReadX 12393 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12406
ReadX 12406 0 53 53
ReadX 12406 53 2 2
ReadX 12406 55 480 480
ReadX 12406 535 2 2
Close 12406
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12407
ReadX 12407 0 53 53
ReadX 12407 53 2 2
ReadX 12407 55 2 2
ReadX 12407 57 184 184
ReadX 12407 241 298 298
Close 12407
ReadX 12400 2048 2048 2048
Close 12400
Close 12401
Close 12402
Close 12403
Close 12405
Close 12393
Close 12394
Close 12397
Close 12398
Close 12395
Close 12396
Close 12337
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 12408
QUERY_FILE_INFORMATION 12408
Close 12408
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Unlink \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Close 12363
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 12409
QUERY_FILE_INFORMATION 12409
Close 12409
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
Unlink \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12410
Close 12410
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12411
ReadX 12411 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12412
ReadX 12412 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12413
ReadX 12413 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12414
ReadX 12414 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12415
ReadX 12415 0 53 53
ReadX 12415 53 2 2
ReadX 12415 55 480 480
ReadX 12415 535 2 2
Close 12415
ReadX 12411 2048 2048 2048
Close 12411
Close 12412
Close 12413
Close 12414
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12416
ReadX 12416 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12417
ReadX 12417 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12418
ReadX 12418 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12419
ReadX 12419 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12420
ReadX 12420 0 53 53
ReadX 12420 53 2 2
ReadX 12420 55 480 480
ReadX 12420 535 2 2
Close 12420
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12421
ReadX 12421 0 511 511
ReadX 12421 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12422
ReadX 12422 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12423
ReadX 12423 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12424
ReadX 12424 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12425
ReadX 12425 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12426
ReadX 12426 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12427
ReadX 12427 0 41 41
ReadX 12421 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12428
ReadX 12428 0 53 53
ReadX 12428 53 2 2
ReadX 12428 55 2 2
ReadX 12428 57 184 184
ReadX 12428 241 298 298
Close 12428
ReadX 12416 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x2 12432
FIND_FIRST \clients\client1\~dmtmp\*
Close 12432
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 12433
QUERY_FILE_INFORMATION 12433
WriteX 12433 2047 1 1
QUERY_FILE_INFORMATION 12433
WriteX 12433 0 2048 2048
Close 12433
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 12434
ReadX 12434 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
Close 12434
Close 12427
Close 12421
Close 12422
Close 12425
Close 12426
Close 12423
Close 12424
Close 12416
Close 12417
Close 12418
Close 12419
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 12435
ReadX 12435 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12436
Close 12436
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12437
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12437 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12438
ReadX 12438 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12439
ReadX 12439 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12440
ReadX 12440 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12441
ReadX 12441 0 53 53
ReadX 12441 53 28 28
ReadX 12441 81 28 28
ReadX 12441 109 28 28
ReadX 12441 137 28 28
ReadX 12441 165 28 28
ReadX 12441 193 28 28
ReadX 12441 221 28 28
ReadX 12441 249 4 4
ReadX 12441 253 4 4
ReadX 12441 257 4 4
ReadX 12441 261 28 28
ReadX 12441 289 2 2
ReadX 12441 291 2 2
ReadX 12441 293 2 2
Close 12441
ReadX 12437 2048 2048 2048
Close 12437
Close 12438
Close 12439
Close 12440
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12442
ReadX 12442 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12443
ReadX 12443 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12444
ReadX 12444 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12445
ReadX 12445 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12446
ReadX 12446 0 53 53
ReadX 12446 53 28 28
ReadX 12446 81 28 28
ReadX 12446 109 28 28
ReadX 12446 137 28 28
ReadX 12446 165 28 28
ReadX 12446 193 28 28
ReadX 12446 221 28 28
ReadX 12446 249 4 4
ReadX 12446 253 4 4
ReadX 12446 257 4 4
ReadX 12446 261 28 28
ReadX 12446 289 2 2
ReadX 12446 291 2 2
ReadX 12446 293 2 2
Close 12446
ReadX 12442 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x2 12450
FIND_FIRST \clients\client1\~dmtmp\*
Close 12450
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 12451
QUERY_FILE_INFORMATION 12451
WriteX 12451 2047 1 1
QUERY_FILE_INFORMATION 12451
WriteX 12451 0 2048 2048
Close 12451
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 12452
ReadX 12452 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
Close 12452
Close 12442
Close 12443
Close 12444
Close 12445
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 12453
ReadX 12453 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12454
Close 12454
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12455
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12455 0 511 511
ReadX 12455 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12456
ReadX 12456 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12457
ReadX 12457 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12458
ReadX 12458 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12459
ReadX 12459 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12460
ReadX 12460 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12461
ReadX 12461 0 53 53
ReadX 12461 53 2 2
ReadX 12461 55 2 2
ReadX 12461 57 184 184
ReadX 12461 241 298 298
Close 12461
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12462
ReadX 12462 0 41 41
ReadX 12455 2048 2048 2048
Close 12462
Close 12455
Close 12456
Close 12459
Close 12460
Close 12457
Close 12458
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12463
ReadX 12463 0 511 511
ReadX 12463 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12464
ReadX 12464 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12465
ReadX 12465 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12466
ReadX 12466 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12467
ReadX 12467 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12468
ReadX 12468 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12469
ReadX 12469 0 53 53
ReadX 12469 53 2 2
ReadX 12469 55 2 2
ReadX 12469 57 184 184
ReadX 12469 241 298 298
Close 12469
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12470
ReadX 12470 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12471
ReadX 12471 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12472
ReadX 12472 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12473
ReadX 12473 0 511 511
ReadX 12472 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12474
ReadX 12474 0 53 53
ReadX 12474 53 2 2
ReadX 12474 55 480 480
ReadX 12474 535 2 2
Close 12474
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12475
ReadX 12475 0 41 41
ReadX 12463 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x2 12479
FIND_FIRST \clients\client1\~dmtmp\*
Close 12479
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 12480
QUERY_FILE_INFORMATION 12480
WriteX 12480 2047 1 1
QUERY_FILE_INFORMATION 12480
WriteX 12480 0 2048 2048
Close 12480
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 12481
ReadX 12481 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
Close 12481
Close 12470
Close 12471
Close 12472
Close 12473
Close 12475
Close 12463
Close 12464
Close 12467
Close 12468
Close 12465
Close 12466
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 12482
ReadX 12482 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
WriteX 12435 4095 1 1
QUERY_FILE_INFORMATION 12435
WriteX 12435 2048 2048 2048
QUERY_FILE_INFORMATION 12435
Flush 12435
WriteX 12435 0 88 88
WriteX 12453 4095 1 1
QUERY_FILE_INFORMATION 12453
WriteX 12453 2048 2048 2048
QUERY_FILE_INFORMATION 12453
Flush 12453
WriteX 12453 0 88 88
WriteX 12482 4095 1 1
QUERY_FILE_INFORMATION 12482
WriteX 12482 2048 2048 2048
QUERY_FILE_INFORMATION 12482
Flush 12482
WriteX 12482 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12483
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12483 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12484
ReadX 12484 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12485
ReadX 12485 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12486
ReadX 12486 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12487
ReadX 12487 0 53 53
ReadX 12487 53 2 2
ReadX 12487 55 480 480
ReadX 12487 535 2 2
Close 12487
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12488
ReadX 12488 0 511 511
ReadX 12488 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12489
ReadX 12489 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12490
ReadX 12490 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12491
ReadX 12491 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12492
ReadX 12492 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12493
ReadX 12493 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12494
ReadX 12494 0 41 41
ReadX 12488 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12495
ReadX 12495 0 53 53
ReadX 12495 53 2 2
ReadX 12495 55 2 2
ReadX 12495 57 184 184
ReadX 12495 241 298 298
Close 12495
ReadX 12483 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12496
ReadX 12496 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12497
ReadX 12497 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12498
ReadX 12498 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12499
ReadX 12499 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12500
ReadX 12500 0 53 53
ReadX 12500 53 28 28
ReadX 12500 81 28 28
ReadX 12500 109 28 28
ReadX 12500 137 28 28
ReadX 12500 165 28 28
ReadX 12500 193 28 28
ReadX 12500 221 28 28
ReadX 12500 249 4 4
ReadX 12500 253 4 4
ReadX 12500 257 4 4
ReadX 12500 261 28 28
ReadX 12500 289 2 2
ReadX 12500 291 2 2
ReadX 12500 293 2 2
Close 12500
ReadX 12496 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12501
ReadX 12501 0 53 53
ReadX 12501 53 2 2
ReadX 12501 55 2 2
ReadX 12501 57 184 184
ReadX 12501 241 298 298
Close 12501
ReadX 12485 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12502
ReadX 12502 0 53 53
ReadX 12502 53 2 2
ReadX 12502 55 480 480
ReadX 12502 535 2 2
Close 12502
ReadX 12496 4096 16384 16384
ReadX 12496 1280 16384 16384
ReadX 12496 2304 6144 6144
ReadX 12496 2688 2048 2048
ReadX 12483 4096 16384 16384
ReadX 12483 1280 16384 16384
ReadX 12483 2304 16384 16384
ReadX 12483 3328 16384 16384
ReadX 12483 272 16384 16384
ReadX 12483 336 16384 16384
ReadX 12483 400 16384 16384
ReadX 12483 464 16384 16384
ReadX 12483 528 16384 16384
ReadX 12483 592 16384 16384
ReadX 12483 656 16384 16384
ReadX 12483 720 16384 16384
ReadX 12483 784 16384 16384
ReadX 12483 848 16384 16384
ReadX 12483 912 16384 16384
ReadX 12489 2048 2048 2048
ReadX 12488 760 2048 2048
ReadX 12488 1144 2048 2048
ReadX 12488 408 2048 2048
ReadX 12488 912 2048 2048
ReadX 12488 1096 2048 2048
ReadX 12488 776 2048 2048
ReadX 12488 560 2048 2048
ReadX 12488 376 2048 2048
ReadX 12488 320 2048 2048
ReadX 12488 3072 2048 2048
ReadX 12488 784 2048 2048
ReadX 12488 2176 2048 2048
ReadX 12488 792 2048 2048
ReadX 12488 576 2048 2048
ReadX 12488 600 2048 2048
ReadX 12488 728 2048 2048
ReadX 12488 1112 2048 2048
ReadX 12488 664 2048 2048
ReadX 12488 976 2048 2048
ReadX 12488 3840 2048 2048
ReadX 12488 296 2048 2048
ReadX 12488 480 2048 2048
ReadX 12488 680 2048 2048
ReadX 12488 696 2048 2048
ReadX 12488 832 2048 2048
ReadX 12488 1016 2048 2048
ReadX 12488 1104 2048 2048
ReadX 12488 3200 2048 2048
ReadX 12488 264 2048 2048
ReadX 12488 448 2048 2048
ReadX 12488 648 2048 2048
ReadX 12488 1136 2048 2048
ReadX 12488 288 2048 2048
ReadX 12488 352 2048 2048
ReadX 12488 536 2048 2048
ReadX 12488 800 2048 2048
ReadX 12488 736 2048 2048
ReadX 12488 392 2048 2048
ReadX 12488 752 2048 2048
ReadX 12488 880 2048 2048
ReadX 12488 1064 2048 2048
ReadX 12488 1128 2048 2048
ReadX 12488 1536 2048 2048
ReadX 12488 2432 2048 2048
ReadX 12488 688 2048 2048
ReadX 12488 872 2048 2048
ReadX 12488 1072 2048 2048
ReadX 12488 984 2048 2048
ReadX 12488 704 2048 2048
ReadX 12488 3328 2048 2048
ReadX 12488 888 2048 2048
ReadX 12488 496 2048 2048
ReadX 12488 624 2048 2048
ReadX 12488 808 2048 2048
ReadX 12488 1008 2048 2048
ReadX 12488 1152 2048 2048
ReadX 12488 416 2048 2048
ReadX 12488 584 2048 2048
ReadX 12488 384 2048 2048
ReadX 12488 568 2048 2048
ReadX 12488 512 2048 2048
ReadX 12488 1408 2048 2048
ReadX 12488 472 2048 2048
ReadX 12488 672 2048 2048
ReadX 12488 2560 2048 2048
ReadX 12488 544 2048 2048
ReadX 12488 920 2048 2048
ReadX 12488 1120 2048 2048
ReadX 12488 2304 2048 2048
ReadX 12488 1080 2048 2048
ReadX 12488 1664 2048 2048
ReadX 12488 608 2048 2048
ReadX 12488 2688 2048 2048
ReadX 12488 3712 2048 2048
ReadX 12488 616 2048 2048
ReadX 12488 632 2048 2048
ReadX 12488 944 2048 2048
ReadX 12488 856 2048 2048
ReadX 12488 768 2048 2048
ReadX 12488 720 2048 2048
ReadX 12488 640 2048 2048
ReadX 12488 1048 2048 2048
ReadX 12488 1040 2048 2048
ReadX 12488 1032 2048 2048
ReadX 12488 1000 2048 2048
ReadX 12488 992 2048 2048
ReadX 12488 968 2048 2048
ReadX 12488 952 2048 2048
ReadX 12488 1056 2048 2048
ReadX 12488 816 2048 2048
ReadX 12488 864 2048 2048
ReadX 12488 2816 2048 2048
ReadX 12488 640 2048 2048
ReadX 12488 1024 2048 2048
ReadX 12488 504 2048 2048
ReadX 12488 424 2048 2048
ReadX 12488 840 2048 2048
ReadX 12488 896 2048 2048
ReadX 12488 520 2048 2048
ReadX 12488 960 2048 2048
ReadX 12488 552 2048 2048
ReadX 12488 488 2048 2048
ReadX 12488 824 2048 2048
ReadX 12488 304 2048 2048
ReadX 12488 768 2048 2048
ReadX 12488 712 2048 2048
ReadX 12488 512 2048 2048
ReadX 12488 432 2048 2048
ReadX 12488 384 2048 2048
ReadX 12488 2944 2048 2048
ReadX 12488 1088 2048 2048
ReadX 12488 928 2048 2048
ReadX 12488 280 2048 2048
ReadX 12488 744 2048 2048
ReadX 12488 3968 2048 2048
ReadX 12488 336 2048 2048
ReadX 12488 592 2048 2048
ReadX 12488 312 2048 2048
ReadX 12488 400 2048 2048
ReadX 12488 904 2048 2048
ReadX 12488 464 2048 2048
ReadX 12488 3456 2048 2048
ReadX 12488 848 2048 2048
ReadX 12488 936 2048 2048
ReadX 12488 656 2048 2048
ReadX 12488 344 2048 2048
ReadX 12488 440 2048 2048
ReadX 12488 4096 2048 2048
ReadX 12488 528 2048 2048
ReadX 12488 2048 2048 2048
ReadX 12488 1024 2048 2048
ReadX 12488 456 2048 2048
ReadX 12488 1792 2048 2048
ReadX 12488 1152 2048 2048
ReadX 12488 3584 2048 2048
ReadX 12488 1920 2048 2048
ReadX 12488 1280 2048 2048
ReadX 12488 896 2048 2048
ReadX 12488 328 2048 2048
Close 12496
Close 12497
Close 12498
Close 12499
Close 12494
Close 12488
Close 12489
Close 12492
Close 12493
Close 12490
Close 12491
Close 12483
Close 12484
Close 12485
Close 12486
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12503
FIND_FIRST \clients\client1\~dmtmp\*
Close 12503
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12504
QUERY_FILE_INFORMATION 12504
WriteX 12504 0 2048 2048
WriteX 12504 18431 1 1
QUERY_FILE_INFORMATION 12504
WriteX 12504 2048 16384 16384
WriteX 12504 1152 16384 16384
WriteX 12504 2176 16384 16384
WriteX 12504 3200 16384 16384
WriteX 12504 264 16384 16384
WriteX 12504 328 16384 16384
WriteX 12504 392 16384 16384
WriteX 12504 456 16384 16384
WriteX 12504 520 16384 16384
WriteX 12504 584 16384 16384
WriteX 12504 648 16384 16384
WriteX 12504 712 16384 16384
WriteX 12504 776 16384 16384
WriteX 12504 840 16384 16384
WriteX 12504 904 16384 16384
WriteX 12504 968 16384 16384
WriteX 12504 1032 16384 16384
WriteX 12504 1096 16384 16384
WriteX 12504 1160 16384 16384
WriteX 12504 1224 16384 16384
WriteX 12504 1288 16384 16384
WriteX 12504 1352 16384 16384
WriteX 12504 1416 16384 16384
WriteX 12504 1480 16384 16384
WriteX 12504 1544 16384 16384
WriteX 12504 1608 16384 16384
WriteX 12504 1672 16384 16384
WriteX 12504 1736 16384 16384
WriteX 12504 1800 16384 16384
WriteX 12504 1864 16384 16384
WriteX 12504 1928 16384 16384
WriteX 12504 1992 16384 16384
WriteX 12504 2056 16384 16384
WriteX 12504 2120 16384 16384
WriteX 12504 2184 16384 16384
WriteX 12504 2248 16384 16384
WriteX 12504 2312 16384 16384
WriteX 12504 2376 16384 16384
WriteX 12504 2440 16384 16384
WriteX 12504 0 88 88
Close 12504
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12505
ReadX 12505 0 511 511
ReadX 12505 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 12505
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\SCHED 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\SCHED 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12506
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12506 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12507
ReadX 12507 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12508
ReadX 12508 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12509
ReadX 12509 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12510
ReadX 12510 0 53 53
ReadX 12510 53 2 2
ReadX 12510 55 480 480
ReadX 12510 535 2 2
Close 12510
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12511
ReadX 12511 0 511 511
ReadX 12511 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12512
ReadX 12512 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12513
ReadX 12513 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12514
ReadX 12514 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12515
ReadX 12515 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12516
ReadX 12516 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12517
ReadX 12517 0 41 41
ReadX 12511 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12518
ReadX 12518 0 53 53
ReadX 12518 53 2 2
ReadX 12518 55 2 2
ReadX 12518 57 184 184
ReadX 12518 241 298 298
Close 12518
ReadX 12506 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12519
ReadX 12519 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12520
ReadX 12520 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12521
ReadX 12521 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12522
ReadX 12522 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12523
ReadX 12523 0 53 53
ReadX 12523 53 28 28
ReadX 12523 81 28 28
ReadX 12523 109 28 28
ReadX 12523 137 28 28
ReadX 12523 165 28 28
ReadX 12523 193 28 28
ReadX 12523 221 28 28
ReadX 12523 249 4 4
ReadX 12523 253 4 4
ReadX 12523 257 4 4
ReadX 12523 261 28 28
ReadX 12523 289 2 2
ReadX 12523 291 2 2
ReadX 12523 293 2 2
Close 12523
ReadX 12519 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12524
ReadX 12524 0 53 53
ReadX 12524 53 2 2
ReadX 12524 55 2 2
ReadX 12524 57 184 184
ReadX 12524 241 298 298
Close 12524
ReadX 12508 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12525
ReadX 12525 0 53 53
ReadX 12525 53 2 2
ReadX 12525 55 480 480
ReadX 12525 535 2 2
Close 12525
Close 12519
Close 12520
Close 12521
Close 12522
Close 12517
Close 12511
Close 12512
Close 12515
Close 12516
Close 12513
Close 12514
Close 12506
Close 12507
Close 12508
Close 12509
Close 12435
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 12526
QUERY_FILE_INFORMATION 12526
Close 12526
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
Unlink \clients\client1\~dmtmp\PARADOX\__42B96.DB
Close 12453
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 12527
QUERY_FILE_INFORMATION 12527
Close 12527
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
Unlink \clients\client1\~dmtmp\PARADOX\__43212.DB
Close 12482
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 12528
QUERY_FILE_INFORMATION 12528
Close 12528
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
Unlink \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12529
Close 12529
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12530
ReadX 12530 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12531
ReadX 12531 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12532
ReadX 12532 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12533
ReadX 12533 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12534
ReadX 12534 0 53 53
ReadX 12534 53 28 28
ReadX 12534 81 28 28
ReadX 12534 109 28 28
ReadX 12534 137 28 28
ReadX 12534 165 28 28
ReadX 12534 193 28 28
ReadX 12534 221 28 28
ReadX 12534 249 4 4
ReadX 12534 253 4 4
ReadX 12534 257 4 4
ReadX 12534 261 28 28
ReadX 12534 289 2 2
ReadX 12534 291 2 2
ReadX 12534 293 2 2
Close 12534
ReadX 12530 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
ReadX 12530 384 2048 2048
ReadX 12530 768 16384 16384
ReadX 12530 1792 14336 14336
ReadX 12533 2048 2048 2048
ReadX 12532 2048 2048 2048
WriteX 12530 1152 2048 2048
WriteX 12533 2048 2048 2048
WriteX 12532 2048 2048 2048
WriteX 12530 0 88 88
WriteX 12531 0 88 88
WriteX 12532 0 88 88
WriteX 12533 0 88 88
Close 12530
Close 12531
Close 12532
Close 12533
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12535
Close 12535
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12536
ReadX 12536 0 511 511
ReadX 12536 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12537
ReadX 12537 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12538
ReadX 12538 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12539
ReadX 12539 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12540
ReadX 12540 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12541
ReadX 12541 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12542
ReadX 12542 0 53 53
ReadX 12542 53 2 2
ReadX 12542 55 2 2
ReadX 12542 57 184 184
ReadX 12542 241 298 298
Close 12542
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12543
ReadX 12543 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12544
ReadX 12544 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12545
ReadX 12545 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12546
ReadX 12546 0 511 511
ReadX 12545 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12547
ReadX 12547 0 53 53
ReadX 12547 53 2 2
ReadX 12547 55 480 480
ReadX 12547 535 2 2
Close 12547
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12548
ReadX 12548 0 41 41
ReadX 12536 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.TV
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.TV 0x40 0x1 12549
QUERY_FILE_INFORMATION 12549
QUERY_FILE_INFORMATION 12549
ReadX 12549 0 8192 8192
Close 12549
ReadX 12536 1152 2048 2048
ReadX 12536 4096 16384 16384
Close 12543
Close 12544
Close 12545
Close 12546
Close 12548
Close 12536
Close 12537
Close 12540
Close 12541
Close 12538
Close 12539
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\PXTOOLS.FT 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 12550
Close 12550
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 12551
QUERY_FILE_INFORMATION 12551
ReadX 12551 0 64 64
ReadX 12551 144 64 64
ReadX 12551 224 156 156
ReadX 12551 1193 128 128
ReadX 12551 1201 128 128
ReadX 12551 1072 4 4
ReadX 12551 1076 1925 1925
ReadX 12551 758 4 4
ReadX 12551 762 4557 4557
ReadX 12551 1052 4 4
ReadX 12551 1056 314 314
ReadX 12551 1056 11056 11056
Close 12551
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12552
ReadX 12552 0 511 511
ReadX 12552 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12553
ReadX 12553 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12554
ReadX 12554 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12555
ReadX 12555 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12556
ReadX 12556 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12557
ReadX 12557 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12558
ReadX 12558 0 53 53
ReadX 12558 53 2 2
ReadX 12558 55 2 2
ReadX 12558 57 184 184
ReadX 12558 241 298 298
Close 12558
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12559
ReadX 12559 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12560
ReadX 12560 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12561
ReadX 12561 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12562
ReadX 12562 0 511 511
ReadX 12561 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12563
ReadX 12563 0 53 53
ReadX 12563 53 2 2
ReadX 12563 55 480 480
ReadX 12563 535 2 2
Close 12563
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12564
ReadX 12564 0 41 41
ReadX 12552 2048 2048 2048
ReadX 12553 2048 2048 2048
ReadX 12552 1144 2048 2048
ReadX 12552 1152 2048 2048
ReadX 12552 4096 16384 16384
WriteX 12552 2048 2048 2048
WriteX 12553 2048 2048 2048
WriteX 12552 0 88 88
WriteX 12553 0 88 88
Close 12559
Close 12560
Close 12561
Close 12562
Close 12564
Close 12552
Close 12553
Close 12556
Close 12557
Close 12554
Close 12555
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.FSL
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FSL 0x40 0x1 12565
Close 12565
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FSL 0x40 0x1 12566
QUERY_FILE_INFORMATION 12566
ReadX 12566 0 64 64
ReadX 12566 144 64 64
ReadX 12566 224 84 84
ReadX 12566 478 16 16
ReadX 12566 1056 6176 6176
Close 12566
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12567
ReadX 12567 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12568
ReadX 12568 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12569
ReadX 12569 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12570
ReadX 12570 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12571
ReadX 12571 0 53 53
ReadX 12571 53 28 28
ReadX 12571 81 28 28
ReadX 12571 109 28 28
ReadX 12571 137 28 28
ReadX 12571 165 28 28
ReadX 12571 193 28 28
ReadX 12571 221 28 28
ReadX 12571 249 4 4
ReadX 12571 253 4 4
ReadX 12571 257 4 4
ReadX 12571 261 28 28
ReadX 12571 289 2 2
ReadX 12571 291 2 2
ReadX 12571 293 2 2
Close 12571
ReadX 12567 2048 2048 2048
ReadX 12568 2048 2048 2048
ReadX 12567 1280 2048 2048
ReadX 12570 2048 2048 2048
ReadX 12569 2048 2048 2048
WriteX 12567 1280 2048 2048
WriteX 12570 2048 2048 2048
WriteX 12569 2048 2048 2048
WriteX 12568 2048 2048 2048
WriteX 12567 0 88 88
WriteX 12568 0 88 88
WriteX 12569 0 88 88
WriteX 12570 0 88 88
WriteX 12567 1280 2048 2048
WriteX 12570 2048 2048 2048
WriteX 12569 2048 2048 2048
WriteX 12568 2048 2048 2048
WriteX 12567 0 88 88
WriteX 12568 0 88 88
WriteX 12569 0 88 88
WriteX 12570 0 88 88
WriteX 12567 1280 2048 2048
WriteX 12570 2048 2048 2048
WriteX 12569 2048 2048 2048
WriteX 12568 2048 2048 2048
WriteX 12567 0 88 88
WriteX 12568 0 88 88
WriteX 12569 0 88 88
WriteX 12570 0 88 88
Close 12567
Close 12568
Close 12569
Close 12570
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12572
ReadX 12572 0 511 511
ReadX 12572 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12573
ReadX 12573 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12574
ReadX 12574 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12575
ReadX 12575 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12576
ReadX 12576 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12577
ReadX 12577 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12578
ReadX 12578 0 53 53
ReadX 12578 53 2 2
ReadX 12578 55 2 2
ReadX 12578 57 184 184
ReadX 12578 241 298 298
Close 12578
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12579
ReadX 12579 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12580
ReadX 12580 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12581
ReadX 12581 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12582
ReadX 12582 0 511 511
ReadX 12581 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12583
ReadX 12583 0 53 53
ReadX 12583 53 2 2
ReadX 12583 55 480 480
ReadX 12583 535 2 2
Close 12583
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12584
ReadX 12584 0 41 41
ReadX 12572 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x2 12588
FIND_FIRST \clients\client1\~dmtmp\*
Close 12588
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 12589
QUERY_FILE_INFORMATION 12589
WriteX 12589 2047 1 1
QUERY_FILE_INFORMATION 12589
WriteX 12589 0 2048 2048
Close 12589
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 12590
ReadX 12590 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
WriteX 12590 4095 1 1
QUERY_FILE_INFORMATION 12590
WriteX 12590 2048 2048 2048
WriteX 12590 0 88 88
Close 12590
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 12591
ReadX 12591 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
ReadX 12591 2048 2048 2048
Close 12579
Close 12580
Close 12581
Close 12582
Close 12584
Close 12572
Close 12573
Close 12576
Close 12577
Close 12574
Close 12575
WriteX 12591 2048 2048 2048
WriteX 12591 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12592
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12592 0 511 511
ReadX 12592 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12593
ReadX 12593 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12594
ReadX 12594 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12595
ReadX 12595 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12596
ReadX 12596 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12597
ReadX 12597 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12598
ReadX 12598 0 53 53
ReadX 12598 53 2 2
ReadX 12598 55 2 2
ReadX 12598 57 184 184
ReadX 12598 241 298 298
Close 12598
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12599
ReadX 12599 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12600
ReadX 12600 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12601
ReadX 12601 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12602
ReadX 12602 0 511 511
ReadX 12601 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12603
ReadX 12603 0 53 53
ReadX 12603 53 2 2
ReadX 12603 55 480 480
ReadX 12603 535 2 2
Close 12603
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12604
ReadX 12604 0 41 41
ReadX 12592 2048 2048 2048
ReadX 12592 1152 2048 2048
ReadX 12592 4096 16384 16384
ReadX 12592 1280 16384 16384
ReadX 12592 2304 16384 16384
ReadX 12592 3328 16384 16384
ReadX 12592 272 16384 16384
ReadX 12592 336 16384 16384
ReadX 12592 400 16384 16384
ReadX 12592 464 16384 16384
ReadX 12592 528 16384 16384
ReadX 12592 592 16384 16384
ReadX 12592 656 16384 16384
ReadX 12592 720 16384 16384
ReadX 12592 784 16384 16384
ReadX 12592 848 16384 16384
ReadX 12592 912 16384 16384
ReadX 12592 976 16384 16384
ReadX 12592 1040 16384 16384
ReadX 12592 1104 12288 12288
Close 12599
Close 12600
Close 12601
Close 12602
Close 12604
Close 12592
Close 12593
Close 12596
Close 12597
Close 12594
Close 12595
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12605
FIND_FIRST \clients\client1\~dmtmp\*
Close 12605
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12606
QUERY_FILE_INFORMATION 12606
WriteX 12606 0 2048 2048
WriteX 12606 2048 4096 4096
WriteX 12606 0 88 88
Close 12606
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12607
ReadX 12607 0 511 511
ReadX 12607 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 12607
WriteX 12591 2048 2048 2048
WriteX 12591 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12608
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12608 0 511 511
ReadX 12608 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12609
ReadX 12609 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12610
ReadX 12610 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12611
ReadX 12611 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12612
ReadX 12612 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12613
ReadX 12613 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12614
ReadX 12614 0 53 53
ReadX 12614 53 2 2
ReadX 12614 55 2 2
ReadX 12614 57 184 184
ReadX 12614 241 298 298
Close 12614
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12615
ReadX 12615 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12616
ReadX 12616 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12617
ReadX 12617 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12618
ReadX 12618 0 511 511
ReadX 12617 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12619
ReadX 12619 0 53 53
ReadX 12619 53 2 2
ReadX 12619 55 480 480
ReadX 12619 535 2 2
Close 12619
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12620
ReadX 12620 0 41 41
ReadX 12608 2048 2048 2048
ReadX 12608 1152 2048 2048
ReadX 12608 4096 16384 16384
ReadX 12608 1280 16384 16384
ReadX 12608 2304 16384 16384
ReadX 12608 3328 16384 16384
ReadX 12608 272 16384 16384
ReadX 12608 336 16384 16384
ReadX 12608 400 16384 16384
ReadX 12608 464 16384 16384
ReadX 12608 528 16384 16384
ReadX 12608 592 16384 16384
ReadX 12608 656 16384 16384
ReadX 12608 720 16384 16384
ReadX 12608 784 16384 16384
ReadX 12608 848 16384 16384
ReadX 12608 912 16384 16384
ReadX 12608 976 16384 16384
ReadX 12608 1040 16384 16384
ReadX 12608 1104 12288 12288
Close 12615
Close 12616
Close 12617
Close 12618
Close 12620
Close 12608
Close 12609
Close 12612
Close 12613
Close 12610
Close 12611
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12621
FIND_FIRST \clients\client1\~dmtmp\*
Close 12621
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12622
QUERY_FILE_INFORMATION 12622
WriteX 12622 0 2048 2048
WriteX 12622 2048 4096 4096
WriteX 12622 0 88 88
Close 12622
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12623
ReadX 12623 0 511 511
ReadX 12623 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 12623
Close 12591
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 12624
QUERY_FILE_INFORMATION 12624
Close 12624
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
Unlink \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 12625
Close 12625
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 12626
QUERY_FILE_INFORMATION 12626
ReadX 12626 0 64 64
ReadX 12626 144 64 64
ReadX 12626 224 156 156
ReadX 12626 1193 128 128
ReadX 12626 1201 128 128
ReadX 12626 1072 4 4
ReadX 12626 1076 1925 1925
ReadX 12626 758 4 4
ReadX 12626 762 4557 4557
ReadX 12626 1052 4 4
ReadX 12626 1056 314 314
ReadX 12626 1056 11056 11056
Close 12626
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12627
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12627 0 511 511
ReadX 12627 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12628
ReadX 12628 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12629
ReadX 12629 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12630
ReadX 12630 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12631
ReadX 12631 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12632
ReadX 12632 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12633
ReadX 12633 0 53 53
ReadX 12633 53 2 2
ReadX 12633 55 2 2
ReadX 12633 57 184 184
ReadX 12633 241 298 298
Close 12633
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12634
ReadX 12634 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12635
ReadX 12635 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12636
ReadX 12636 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12637
ReadX 12637 0 511 511
ReadX 12636 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12638
ReadX 12638 0 53 53
ReadX 12638 53 2 2
ReadX 12638 55 480 480
ReadX 12638 535 2 2
Close 12638
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12639
ReadX 12639 0 41 41
ReadX 12627 2048 2048 2048
ReadX 12627 1152 2048 2048
ReadX 12627 4096 16384 16384
Close 12634
Close 12635
Close 12636
Close 12637
Close 12639
Close 12627
Close 12628
Close 12631
Close 12632
Close 12629
Close 12630
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\QUENRD 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\QUENRD 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12640
ReadX 12640 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12641
ReadX 12641 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12642
ReadX 12642 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12643
ReadX 12643 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12644
ReadX 12644 0 53 53
ReadX 12644 53 2 2
ReadX 12644 55 480 480
ReadX 12644 535 2 2
Close 12644
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12645
ReadX 12645 0 511 511
ReadX 12645 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12646
ReadX 12646 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12647
ReadX 12647 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12648
ReadX 12648 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12649
ReadX 12649 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12650
ReadX 12650 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12651
ReadX 12651 0 41 41
ReadX 12645 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12652
ReadX 12652 0 53 53
ReadX 12652 53 2 2
ReadX 12652 55 2 2
ReadX 12652 57 184 184
ReadX 12652 241 298 298
Close 12652
ReadX 12640 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x2 12656
FIND_FIRST \clients\client1\~dmtmp\*
Close 12656
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 12657
QUERY_FILE_INFORMATION 12657
WriteX 12657 2047 1 1
QUERY_FILE_INFORMATION 12657
WriteX 12657 0 2048 2048
Close 12657
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 12658
ReadX 12658 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
WriteX 12658 4095 1 1
QUERY_FILE_INFORMATION 12658
WriteX 12658 2048 2048 2048
WriteX 12658 0 88 88
Close 12658
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 12659
ReadX 12659 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
ReadX 12659 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x2 12663
Close 12663
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 12664
QUERY_FILE_INFORMATION 12664
WriteX 12664 2047 1 1
QUERY_FILE_INFORMATION 12664
WriteX 12664 0 2048 2048
Close 12664
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 12665
ReadX 12665 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
WriteX 12665 4095 1 1
QUERY_FILE_INFORMATION 12665
WriteX 12665 2048 2048 2048
WriteX 12665 0 88 88
Close 12665
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 12666
ReadX 12666 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
ReadX 12666 2048 2048 2048
Close 12651
Close 12645
Close 12646
Close 12649
Close 12650
Close 12647
Close 12648
Close 12640
Close 12641
Close 12642
Close 12643
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12667
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12667 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12668
ReadX 12668 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12669
ReadX 12669 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12670
ReadX 12670 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12671
ReadX 12671 0 53 53
ReadX 12671 53 2 2
ReadX 12671 55 480 480
ReadX 12671 535 2 2
Close 12671
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12672
ReadX 12672 0 511 511
ReadX 12672 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12673
ReadX 12673 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12674
ReadX 12674 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12675
ReadX 12675 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12676
ReadX 12676 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12677
ReadX 12677 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12678
ReadX 12678 0 41 41
ReadX 12672 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12679
ReadX 12679 0 53 53
ReadX 12679 53 2 2
ReadX 12679 55 2 2
ReadX 12679 57 184 184
ReadX 12679 241 298 298
Close 12679
ReadX 12667 2048 2048 2048
ReadX 12667 384 16384 16384
ReadX 12667 1408 16384 16384
ReadX 12667 2560 16384 16384
ReadX 12667 3584 16384 16384
ReadX 12667 288 16384 16384
ReadX 12667 352 16384 16384
ReadX 12667 416 16384 16384
ReadX 12667 480 16384 16384
ReadX 12667 552 16384 16384
ReadX 12667 616 16384 16384
ReadX 12667 680 16384 16384
ReadX 12667 744 16384 16384
ReadX 12667 808 16384 16384
ReadX 12667 872 16384 16384
ReadX 12667 936 10240 10240
Close 12678
Close 12672
Close 12673
Close 12676
Close 12677
Close 12674
Close 12675
Close 12667
Close 12668
Close 12669
Close 12670
Close 12659
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 12680
QUERY_FILE_INFORMATION 12680
Close 12680
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
Unlink \clients\client1\~dmtmp\PARADOX\__52E2B.DB
Close 12666
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 12681
QUERY_FILE_INFORMATION 12681
Close 12681
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
Unlink \clients\client1\~dmtmp\PARADOX\__52EF7.DB
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 12682
ReadX 12682 0 65471 65471
ReadX 12682 65471 63 63
ReadX 12682 65534 65471 65471
ReadX 12682 131005 63 63
ReadX 12682 131068 65471 65471
ReadX 12682 196539 63 63
ReadX 12682 196602 65471 65471
ReadX 12682 262073 63 63
ReadX 12682 262136 65471 65471
ReadX 12682 327607 63 63
ReadX 12682 327670 10 10
Close 12682
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 12683
ReadX 12683 0 65471 65471
ReadX 12683 65471 63 63
ReadX 12683 65534 65471 65471
ReadX 12683 131005 63 63
ReadX 12683 131068 65471 65471
ReadX 12683 196539 63 63
ReadX 12683 196602 65471 65471
ReadX 12683 262073 63 63
ReadX 12683 262136 65471 65471
ReadX 12683 327607 63 63
ReadX 12683 327670 65471 65471
ReadX 12683 393141 63 63
ReadX 12683 393204 65471 65471
ReadX 12683 458675 63 63
ReadX 12683 458738 65471 65471
ReadX 12683 524209 63 63
ReadX 12683 524272 65471 65471
ReadX 12683 589743 63 63
ReadX 12683 589806 65471 65471
ReadX 12683 655277 63 63
ReadX 12683 655340 32 32
Close 12683
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 12684
ReadX 12684 0 65471 65471
ReadX 12684 65471 63 63
ReadX 12684 65534 65471 65471
ReadX 12684 131005 63 63
ReadX 12684 131068 65471 65471
ReadX 12684 196539 63 63
ReadX 12684 196602 65471 65471
ReadX 12684 262073 63 63
ReadX 12684 262136 65471 65471
ReadX 12684 327607 63 63
ReadX 12684 327670 65471 65471
ReadX 12684 393141 63 63
ReadX 12684 393204 65471 65471
ReadX 12684 458675 63 63
ReadX 12684 458738 65471 65471
ReadX 12684 524209 63 63
ReadX 12684 524272 65471 65471
ReadX 12684 589743 63 63
ReadX 12684 589806 65471 65471
ReadX 12684 655277 63 63
ReadX 12684 655340 65471 65471
ReadX 12684 720811 63 63
ReadX 12684 720874 65471 65471
ReadX 12684 786345 63 63
ReadX 12684 786408 65471 65471
ReadX 12684 851879 63 63
ReadX 12684 851942 65471 65471
ReadX 12684 917413 63 63
ReadX 12684 917476 65471 65471
ReadX 12684 982947 63 63
ReadX 12684 983010 65471 65471
ReadX 12684 1048481 63 63
ReadX 12684 1048544 65471 65471
ReadX 12684 1114015 63 63
ReadX 12684 1114078 65471 65471
ReadX 12684 1179549 63 63
ReadX 12684 1179612 65471 65471
ReadX 12684 1245083 63 63
ReadX 12684 1245146 65471 65471
ReadX 12684 1310617 63 63
ReadX 12684 1310680 65471 65471
ReadX 12684 1376151 63 63
ReadX 12684 1376214 65471 65471
ReadX 12684 1441685 63 63
ReadX 12684 1441748 65471 65471
ReadX 12684 1507219 63 63
ReadX 12684 1507282 65471 65471
ReadX 12684 1572753 63 63
ReadX 12684 1572816 65471 65471
ReadX 12684 1638287 63 63
ReadX 12684 1638350 65471 65471
ReadX 12684 1703821 63 63
ReadX 12684 1703884 65471 65471
ReadX 12684 1769355 63 63
ReadX 12684 1769418 65471 65471
ReadX 12684 1834889 63 63
ReadX 12684 1834952 32824 32824
Close 12684
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TEMPLATES 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\STARTUP 1
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\CHAP10 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\CHAP10.DOC
NTCreateX \clients\client1\~dmtmp\WORD\CHAP10.DOC 0x40 0x1 12685
QUERY_FILE_INFORMATION 12685
ReadX 12685 0 512 512
ReadX 12685 512 512 512
ReadX 12685 1024 512 512
QUERY_FILE_INFORMATION 12685
QUERY_FILE_INFORMATION 12685
ReadX 12685 2560 2048 2048
ReadX 12685 1984 2048 2048
NTCreateX \clients\client1\~dmtmp\WORD\~$CHAP10.DOC 0x40 0x2 12686
WriteX 12686 52 1 1
QUERY_FILE_INFORMATION 12686
WriteX 12686 0 53 53
Close 12686
ReadX 12685 2208 650 650
ReadX 12685 1920 2048 2048
ReadX 12685 2112 2048 2048
ReadX 12685 1856 2048 2048
ReadX 12685 1824 2048 2048
ReadX 12685 1536 512 512
ReadX 12685 1632 1536 1536
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT 1
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x2 12687
Close 12687
Unlink \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
ReadX 12685 1568 512 512
ReadX 12685 1536 512 512
ReadX 12685 2176 384 384
ReadX 12685 1600 416 416
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x40 0x2 12688
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
ReadX 12685 288 2048 2048
ReadX 12685 2336 2048 2048
ReadX 12685 4384 2048 2048
ReadX 12685 6432 2048 2048
ReadX 12685 8480 2048 2048
ReadX 12685 10528 2048 2048
ReadX 12685 12576 2048 2048
WriteX 12688 15359 1 1
QUERY_FILE_INFORMATION 12688
ReadX 12685 14624 2048 2048
ReadX 12685 16672 2048 2048
ReadX 12685 18720 2048 2048
ReadX 12685 1728 2048 2048
WriteX 12688 0 15360 15360
Close 12688
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x40 0x1 12689
QUERY_FILE_INFORMATION 12689
ReadX 12689 0 512 512
ReadX 12689 2048 512 512
ReadX 12689 2560 512 512
QUERY_FILE_INFORMATION 12689
QUERY_FILE_INFORMATION 12689
QUERY_FILE_INFORMATION 12689
QUERY_FILE_INFORMATION 12689
QUERY_FILE_INFORMATION 12689
WriteX 12689 2152 384 384
QUERY_FILE_INFORMATION 12689
WriteX 12689 2150 22 22
WriteX 12689 2144 106 106
QUERY_FILE_INFORMATION 12689
WriteX 12689 2176 496 496
ReadX 12689 2176 496 496
QUERY_FILE_INFORMATION 12689
WriteX 12689 2440 384 384
QUERY_FILE_INFORMATION 12689
WriteX 12689 2152 384 384
WriteX 12689 2432 112 112
QUERY_FILE_INFORMATION 12689
WriteX 12689 2439 16 16
QUERY_FILE_INFORMATION 12689
WriteX 12689 2208 220 220
ReadX 12689 2208 220 220
QUERY_FILE_INFORMATION 12689
QUERY_FILE_INFORMATION 12689
WriteX 12689 2440 220 220
QUERY_FILE_INFORMATION 12689
WriteX 12689 2453 36 36
WriteX 12689 2080 512 512
WriteX 12689 2176 512 512
WriteX 12689 2112 512 512
WriteX 12689 2048 512 512
WriteX 12689 0 512 512
QUERY_FILE_INFORMATION 12685
QUERY_FILE_INFORMATION 12685
WriteX 12689 2080 512 512
Close 12689
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x200000 0x1 12690
Close 12690
Rename \clients\client1\~dmtmp\WORD\~WRD0000.TMP \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x1 12691
QUERY_FILE_INFORMATION 12691
ReadX 12691 0 512 512
ReadX 12691 2048 512 512
ReadX 12691 2560 512 512
QUERY_FILE_INFORMATION 12691
QUERY_FILE_INFORMATION 12691
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
NTCreateX \clients\client1\~dmtmp\WORD\~$CHAP10.DOC 0x40 0x1 12692
Close 12692
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
Unlink \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
Close 12685
ReadX 12691 1408 512 512
ReadX 12691 2048 512 512
ReadX 12691 1536 512 512
ReadX 12691 2560 512 512
ReadX 12691 3072 512 512
ReadX 12691 3584 512 512
ReadX 12691 4096 512 512
ReadX 12691 4608 512 512
ReadX 12691 5120 512 512
ReadX 12691 5632 512 512
ReadX 12691 6144 512 512
ReadX 12691 6656 512 512
ReadX 12691 7168 512 512
ReadX 12691 7680 512 512
ReadX 12691 8192 512 512
ReadX 12691 8704 512 512
ReadX 12691 9216 512 512
ReadX 12691 9728 512 512
ReadX 12691 10240 512 512
ReadX 12691 10752 512 512
ReadX 12691 11264 512 512
ReadX 12691 11776 512 512
ReadX 12691 12288 512 512
ReadX 12691 12800 512 512
ReadX 12691 13312 512 512
ReadX 12691 13824 512 512
ReadX 12691 14336 512 512
ReadX 12691 14848 512 512
ReadX 12691 15360 512 0
ReadX 12691 15360 512 0
ReadX 12691 15360 512 0
ReadX 12691 15360 512 0
ReadX 12691 15360 512 0
ReadX 12691 15360 512 0
ReadX 12691 15360 512 0
ReadX 12691 15360 512 0
ReadX 12691 15360 512 0
ReadX 12691 15360 512 0
ReadX 12691 2560 2048 2048
ReadX 12691 4608 2048 2048
ReadX 12691 6656 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\BASEMACH.DOC
NTCreateX \clients\client1\~dmtmp\WORD\BASEMACH.DOC 0x40 0x1 12693
QUERY_FILE_INFORMATION 12693
ReadX 12693 0 512 512
ReadX 12693 512 512 512
ReadX 12693 1024 512 512
QUERY_FILE_INFORMATION 12693
QUERY_FILE_INFORMATION 12693
ReadX 12693 352 2048 2048
ReadX 12693 608 1097 1097
ReadX 12693 576 1609 1609
ReadX 12693 4096 512 512
ReadX 12693 1536 512 512
ReadX 12693 3840 256 256
ReadX 12693 288 576 576
ReadX 12693 512 512 512
ReadX 12693 480 512 512
ReadX 12693 544 512 512
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\WORD\BASEMACH.DOC 0x40 0x1 12694
ReadX 12694 0 4096 4096
ReadX 12694 4096 4096 4096
ReadX 12694 8192 4096 4096
Close 12693
Close 12694
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\RESULTS.XLS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x40 0x2 12695
WriteX 12695 15359 1 1
QUERY_FILE_INFORMATION 12695
WriteX 12695 0 15360 15360
Close 12695
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x40 0x1 12696
QUERY_FILE_INFORMATION 12696
ReadX 12696 0 512 512
ReadX 12696 2048 512 512
ReadX 12696 2560 512 512
QUERY_FILE_INFORMATION 12696
QUERY_FILE_INFORMATION 12696
QUERY_FILE_INFORMATION 12696
QUERY_FILE_INFORMATION 12696
QUERY_FILE_INFORMATION 12696
WriteX 12696 2152 384 384
QUERY_FILE_INFORMATION 12696
WriteX 12696 2150 22 22
WriteX 12696 2144 106 106
QUERY_FILE_INFORMATION 12696
WriteX 12696 2176 476 476
ReadX 12696 2176 476 476
QUERY_FILE_INFORMATION 12696
WriteX 12696 2440 384 384
QUERY_FILE_INFORMATION 12696
WriteX 12696 2152 384 384
WriteX 12696 2432 92 92
QUERY_FILE_INFORMATION 12696
WriteX 12696 2437 36 36
QUERY_FILE_INFORMATION 12696
WriteX 12696 2208 220 220
ReadX 12696 2208 220 220
QUERY_FILE_INFORMATION 12696
QUERY_FILE_INFORMATION 12696
WriteX 12696 2440 220 220
QUERY_FILE_INFORMATION 12696
WriteX 12696 2453 36 36
WriteX 12696 2080 512 512
WriteX 12696 2176 512 512
WriteX 12696 2112 512 512
WriteX 12696 2048 512 512
WriteX 12696 0 512 512
QUERY_FILE_INFORMATION 12691
QUERY_FILE_INFORMATION 12691
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL0004.TMP 1
Close 12691
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x200000 0x1 12697
Close 12697
Rename \clients\client1\~dmtmp\WORD\HANDOUT.DOC \clients\client1\~dmtmp\WORD\~WRL0004.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL0004.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x40 0x1 12698
QUERY_FILE_INFORMATION 12698
ReadX 12698 0 512 512
ReadX 12698 2048 512 512
ReadX 12698 2560 512 512
QUERY_FILE_INFORMATION 12698
QUERY_FILE_INFORMATION 12698
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x200000 0x1 12699
Close 12699
WriteX 12696 2080 512 512
Close 12696
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x200000 0x1 12700
Close 12700
Rename \clients\client1\~dmtmp\WORD\~WRD0003.TMP \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x1 12701
QUERY_FILE_INFORMATION 12701
ReadX 12701 0 512 512
ReadX 12701 2048 512 512
ReadX 12701 2560 512 512
QUERY_FILE_INFORMATION 12701
QUERY_FILE_INFORMATION 12701
ReadX 12701 1312 512 512
ReadX 12701 1536 512 512
ReadX 12701 2048 512 512
ReadX 12701 576 512 512
ReadX 12701 1088 512 512
ReadX 12701 1056 512 512
ReadX 12701 1120 512 512
ReadX 12701 1184 512 512
ReadX 12701 2560 2048 2048
ReadX 12701 4608 2048 2048
ReadX 12701 6656 2048 2048
ReadX 12701 8704 2048 2048
ReadX 12701 10752 2048 2048
ReadX 12701 12800 2048 2048
ReadX 12701 14848 2048 512
ReadX 12701 15360 1536 0
ReadX 12701 1088 2048 2048
ReadX 12701 3136 2048 2048
ReadX 12701 1665 5835 5835
ReadX 12701 1856 2048 2048
ReadX 12701 2112 512 512
ReadX 12701 2152 384 384
ReadX 12701 2432 92 92
ReadX 12701 2176 512 512
ReadX 12701 2440 220 220
QUERY_FILE_INFORMATION 12701
QUERY_FILE_INFORMATION 12701
ReadX 12701 2432 512 512
WriteX 12701 2272 512 512
ReadX 12701 2144 512 512
WriteX 12701 2304 512 512
WriteX 12701 2272 92 92
WriteX 12701 2208 512 512
WriteX 12701 2720 512 512
WriteX 12701 0 512 512
QUERY_FILE_INFORMATION 12701
QUERY_FILE_INFORMATION 12701
ReadX 12701 1312 4096 4096
ReadX 12701 5408 4096 4096
ReadX 12701 9504 3305 3305
ReadX 12701 512 4096 4096
QUERY_FILE_INFORMATION 12701
QUERY_FILE_INFORMATION 12701
QUERY_FILE_INFORMATION 12701
WriteX 12701 3132 50 50
WriteX 12701 3182 4096 4096
WriteX 12701 7278 4096 4096
WriteX 12701 15469 1 1
QUERY_FILE_INFORMATION 12701
WriteX 12701 11374 4096 4096
WriteX 12701 15470 3584 3584
WriteX 12701 2144 512 512
WriteX 12701 2336 4096 4096
WriteX 12701 6432 4096 4096
WriteX 12701 10528 4096 4096
WriteX 12701 14624 462 462
WriteX 12701 2048 512 512
WriteX 12701 2560 512 512
WriteX 12701 0 512 512
QUERY_FILE_INFORMATION 12701
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FACTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FACTS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\FACTS.DOC 0x40 0x1 12702
QUERY_FILE_INFORMATION 12702
ReadX 12702 0 512 512
ReadX 12702 1152 512 512
ReadX 12702 1664 512 512
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
ReadX 12702 512 2048 2048
ReadX 12702 928 2048 2048
NTCreateX \clients\client1\~dmtmp\WORD\~$FACTS.DOC 0x40 0x2 12703
WriteX 12703 52 1 1
QUERY_FILE_INFORMATION 12703
WriteX 12703 0 53 53
Close 12703
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
ReadX 12702 1120 504 504
ReadX 12702 896 2048 2048
ReadX 12702 1056 1528 1528
ReadX 12702 864 2048 2048
ReadX 12702 832 2048 2048
ReadX 12702 736 2048 2048
ReadX 12702 1216 512 512
ReadX 12702 1256 384 384
ReadX 12702 1536 140 140
ReadX 12702 1280 512 512
ReadX 12702 1548 252 252
ReadX 12701 1184 512 512
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS 1
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x2 12704
Close 12704
Unlink \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x40 0x2 12705
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC 1
ReadX 12702 2560 2048 2048
ReadX 12702 4608 2048 2048
ReadX 12702 6656 2048 2048
ReadX 12702 8704 2048 2048
ReadX 12702 10752 2048 2048
WriteX 12705 12005 1 1
QUERY_FILE_INFORMATION 12705
WriteX 12705 0 12006 12006
Close 12705
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x40 0x1 12706
QUERY_FILE_INFORMATION 12706
ReadX 12706 0 512 512
ReadX 12706 1152 512 512
ReadX 12706 1664 512 512
QUERY_FILE_INFORMATION 12706
QUERY_FILE_INFORMATION 12706
QUERY_FILE_INFORMATION 12706
QUERY_FILE_INFORMATION 12706
QUERY_FILE_INFORMATION 12706
QUERY_FILE_INFORMATION 12706
QUERY_FILE_INFORMATION 12706
WriteX 12706 1256 384 384
QUERY_FILE_INFORMATION 12706
WriteX 12706 1254 22 22
WriteX 12706 1248 106 106
QUERY_FILE_INFORMATION 12706
WriteX 12706 1280 508 508
ReadX 12706 1280 508 508
QUERY_FILE_INFORMATION 12706
WriteX 12706 1544 384 384
QUERY_FILE_INFORMATION 12706
WriteX 12706 1256 384 384
WriteX 12706 1536 124 124
QUERY_FILE_INFORMATION 12706
WriteX 12706 1543 4 4
QUERY_FILE_INFORMATION 12706
WriteX 12706 1312 252 252
ReadX 12706 1312 252 252
QUERY_FILE_INFORMATION 12706
QUERY_FILE_INFORMATION 12706
WriteX 12706 1544 252 252
QUERY_FILE_INFORMATION 12706
WriteX 12706 1559 4 4
WriteX 12706 1184 512 512
WriteX 12706 1280 512 512
WriteX 12706 1216 512 512
WriteX 12706 1152 512 512
WriteX 12706 0 512 512
QUERY_FILE_INFORMATION 12702
QUERY_FILE_INFORMATION 12702
WriteX 12706 1184 512 512
Close 12706
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x200000 0x1 12707
Close 12707
Rename \clients\client1\~dmtmp\WORD\~WRD3497.TMP \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x1 12708
QUERY_FILE_INFORMATION 12708
ReadX 12708 0 512 512
ReadX 12708 1152 512 512
ReadX 12708 1664 512 512
QUERY_FILE_INFORMATION 12708
QUERY_FILE_INFORMATION 12708
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\~$FACTS.DOC 0x40 0x1 12709
Close 12709
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
Unlink \clients\client1\~dmtmp\WORD\~$FACTS.DOC
Close 12702
ReadX 12708 736 512 512
ReadX 12708 1536 2048 2048
ReadX 12708 3584 2048 2048
ReadX 12708 5632 2048 2048
ReadX 12708 7680 2048 2048
ReadX 12708 9728 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x40 0x2 12710
WriteX 12710 11990 1 1
QUERY_FILE_INFORMATION 12710
WriteX 12710 0 11991 11991
Close 12710
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x40 0x1 12711
QUERY_FILE_INFORMATION 12711
ReadX 12711 0 512 512
ReadX 12711 1184 512 512
ReadX 12711 1696 512 512
QUERY_FILE_INFORMATION 12711
QUERY_FILE_INFORMATION 12711
QUERY_FILE_INFORMATION 12711
QUERY_FILE_INFORMATION 12711
QUERY_FILE_INFORMATION 12711
QUERY_FILE_INFORMATION 12711
QUERY_FILE_INFORMATION 12711
WriteX 12711 1288 384 384
QUERY_FILE_INFORMATION 12711
WriteX 12711 1286 22 22
WriteX 12711 1280 106 106
QUERY_FILE_INFORMATION 12711
WriteX 12711 1312 508 508
ReadX 12711 1312 508 508
QUERY_FILE_INFORMATION 12711
WriteX 12711 1576 384 384
QUERY_FILE_INFORMATION 12711
WriteX 12711 1288 384 384
WriteX 12711 1568 124 124
QUERY_FILE_INFORMATION 12711
WriteX 12711 1575 4 4
QUERY_FILE_INFORMATION 12711
WriteX 12711 1344 252 252
ReadX 12711 1344 252 252
QUERY_FILE_INFORMATION 12711
QUERY_FILE_INFORMATION 12711
WriteX 12711 1576 252 252
QUERY_FILE_INFORMATION 12711
WriteX 12711 1591 4 4
WriteX 12711 1216 512 512
WriteX 12711 1312 512 512
WriteX 12711 1248 512 512
WriteX 12711 1184 512 512
WriteX 12711 0 512 512
QUERY_FILE_INFORMATION 12708
QUERY_FILE_INFORMATION 12708
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL1146.TMP 1
Close 12708
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x200000 0x1 12712
Close 12712
Rename \clients\client1\~dmtmp\WORD\TIPS.DOC \clients\client1\~dmtmp\WORD\~WRL1146.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL1146.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x40 0x1 12713
QUERY_FILE_INFORMATION 12713
ReadX 12713 0 512 512
ReadX 12713 1152 512 512
ReadX 12713 1664 512 512
QUERY_FILE_INFORMATION 12713
QUERY_FILE_INFORMATION 12713
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x200000 0x1 12714
Close 12714
WriteX 12711 1216 512 512
Close 12711
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x200000 0x1 12715
Close 12715
Rename \clients\client1\~dmtmp\WORD\~WRD1119.TMP \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x1 12716
QUERY_FILE_INFORMATION 12716
ReadX 12716 0 512 512
ReadX 12716 1184 512 512
ReadX 12716 1696 512 512
QUERY_FILE_INFORMATION 12716
QUERY_FILE_INFORMATION 12716
ReadX 12716 1536 512 512
ReadX 12716 736 512 512
ReadX 12716 2048 512 512
ReadX 12716 2560 512 512
ReadX 12716 3072 512 512
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS 1
NTCreateX \clients\client1\~dmtmp\WORD\FSA4230.TMP 0x40 0x2 12717
Close 12717
Unlink \clients\client1\~dmtmp\WORD\FSA4230.TMP
ReadX 12716 914 3899 3899
ReadX 12716 1248 512 512
ReadX 12716 1288 384 384
ReadX 12716 1568 124 124
ReadX 12716 1312 512 512
ReadX 12716 1576 252 252
QUERY_FILE_INFORMATION 12716
QUERY_FILE_INFORMATION 12716
ReadX 12716 1568 512 512
WriteX 12716 1408 512 512
ReadX 12716 1280 512 512
WriteX 12716 1440 512 512
WriteX 12716 1408 124 124
WriteX 12716 1344 512 512
WriteX 12716 1856 512 512
WriteX 12716 0 512 512
QUERY_FILE_INFORMATION 12716
QUERY_FILE_INFORMATION 12716
ReadX 12716 544 4096 4096
ReadX 12716 4640 4096 4096
ReadX 12716 8736 1637 1637
ReadX 12716 512 4096 4096
QUERY_FILE_INFORMATION 12716
QUERY_FILE_INFORMATION 12716
WriteX 12716 1280 512 512
WriteX 12716 1472 3584 3584
WriteX 12716 5056 4096 4096
WriteX 12716 13247 1 1
QUERY_FILE_INFORMATION 12716
WriteX 12716 9152 4096 4096
WriteX 12716 13248 1736 1736
WriteX 12716 1184 512 512
WriteX 12716 1696 512 512
WriteX 12716 0 512 512
QUERY_FILE_INFORMATION 12716
ReadX 12716 1632 1024 1024
ReadX 12716 288 1024 1024
ReadX 12716 1312 2048 2048
ReadX 12716 3360 1024 1024
ReadX 12716 1696 1024 1024
ReadX 12716 2720 512 512
ReadX 12716 3232 512 512
ReadX 12716 3744 512 512
ReadX 12716 4256 512 512
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
ReadX 12716 2066 3998 3998
ReadX 12716 1448 384 384
ReadX 12716 1408 124 124
ReadX 12716 1416 252 252
QUERY_FILE_INFORMATION 12716
QUERY_FILE_INFORMATION 12716
ReadX 12716 1408 512 512
WriteX 12716 1536 512 512
ReadX 12716 1440 512 512
WriteX 12716 2048 512 512
WriteX 12716 1536 124 124
WriteX 12716 512 512 512
WriteX 12716 1024 512 512
WriteX 12716 0 512 512
QUERY_FILE_INFORMATION 12716
ReadX 12716 1696 4096 4096
ReadX 12716 5792 4096 4096
ReadX 12716 9888 1736 1736
ReadX 12716 1280 512 512
ReadX 12716 1472 3584 3584
QUERY_FILE_INFORMATION 12716
QUERY_FILE_INFORMATION 12716
WriteX 12716 3940 156 156
WriteX 12716 4096 512 512
WriteX 12716 544 3584 3584
WriteX 12716 4128 4096 4096
WriteX 12716 8224 3584 3584
WriteX 12716 1344 512 512
WriteX 12716 1856 1536 1536
WriteX 12716 2336 512 512
WriteX 12716 3584 356 356
WriteX 12716 2560 512 512
WriteX 12716 3072 512 512
WriteX 12716 0 512 512
QUERY_FILE_INFORMATION 12716
Close 12698
Close 12701
Close 12716
Close 12713
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x40 0x1 12718
Close 12718
Unlink \clients\client1\~dmtmp\WORD\~WRL0004.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x40 0x1 12719
Close 12719
Unlink \clients\client1\~dmtmp\WORD\~WRL1146.TMP
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 12720
WriteX 12720 0 65471 65471
WriteX 12720 65471 63 63
WriteX 12720 65534 65471 65471
WriteX 12720 131005 63 63
Close 12720
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 12721
WriteX 12721 0 65471 65471
WriteX 12721 65471 63 63
WriteX 12721 65534 65471 65471
WriteX 12721 131005 63 63
WriteX 12721 131068 65471 65471
WriteX 12721 196539 63 63
WriteX 12721 196602 65471 65471
WriteX 12721 262073 63 63
Close 12721
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 12722
WriteX 12722 0 65471 65471
WriteX 12722 65471 63 63
WriteX 12722 65534 65471 65471
WriteX 12722 131005 63 63
WriteX 12722 131068 65471 65471
WriteX 12722 196539 63 63
WriteX 12722 196602 65471 65471
WriteX 12722 262073 63 63
WriteX 12722 262136 65471 65471
WriteX 12722 327607 63 63
WriteX 12722 327670 65471 65471
WriteX 12722 393141 63 63
WriteX 12722 393204 65471 65471
WriteX 12722 458675 63 63
WriteX 12722 458738 65471 65471
WriteX 12722 524209 63 63
Close 12722
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER.MDB
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.MDB 0x40 0x1 12723
QUERY_FILE_INFORMATION 12723
QUERY_FILE_INFORMATION 12723
ReadX 12723 0 16384 16384
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.LDB 0x40 0x2 12724
Close 12724
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.LDB 0x40 0x1 12725
WriteX 12725 63 1 1
QUERY_FILE_INFORMATION 12725
WriteX 12725 0 64 64
ReadX 12723 992 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 344 2048 2048
ReadX 12723 1344 2048 2048
ReadX 12723 1352 2048 2048
ReadX 12723 1320 2048 2048
ReadX 12723 1360 2048 2048
ReadX 12723 1344 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1376 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2304 2048 2048
ReadX 12723 1472 2048 2048
ReadX 12723 0 2048 2048
ReadX 12723 1480 2048 2048
ReadX 12723 1488 2048 2048
ReadX 12723 1496 2048 2048
ReadX 12723 0 2048 2048
ReadX 12723 1504 2048 2048
ReadX 12723 1464 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 1000 2048 2048
ReadX 12723 1416 2048 2048
ReadX 12723 1000 2048 2048
QUERY_FS_INFORMATION 259
ReadX 12723 360 2048 2048
ReadX 12723 368 2048 2048
ReadX 12723 360 2048 2048
ReadX 12723 376 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 1232 2048 2048
ReadX 12723 2432 6144 6144
ReadX 12723 2376 2048 2048
ReadX 12723 2360 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 2376 2048 2048
ReadX 12723 2384 2048 2048
ReadX 12723 2368 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 1296 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 2392 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
ReadX 12723 0 2048 2048
ReadX 12723 2688 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 2688 2048 2048
WriteX 12723 2688 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 0 2048 2048
ReadX 12723 2688 2048 2048
ReadX 12723 2688 2048 2048
ReadX 12723 2688 2048 2048
WriteX 12723 2688 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 0 2048 2048
ReadX 12723 2688 2048 2048
QUERY_FS_INFORMATION 259
ReadX 12723 2688 2048 2048
ReadX 12723 2688 2048 2048
WriteX 12723 2688 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 320 4096 4096
ReadX 12723 0 2048 2048
ReadX 12723 3584 2048 2048
ReadX 12723 3584 2048 2048
ReadX 12723 3584 2048 2048
ReadX 12723 0 2048 2048
WriteX 12723 3584 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2688 2048 2048
ReadX 12723 0 2048 2048
ReadX 12723 2688 2048 2048
ReadX 12723 2688 2048 2048
WriteX 12723 2688 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 0 2048 2048
ReadX 12723 3200 2048 2048
ReadX 12723 3200 2048 2048
ReadX 12723 3200 2048 2048
WriteX 12723 3200 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 0 2048 2048
ReadX 12723 3456 2048 2048
ReadX 12723 3456 2048 2048
ReadX 12723 3456 2048 2048
WriteX 12723 3456 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2496 2048 2048
ReadX 12723 2472 2048 2048
ReadX 12723 2456 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 2472 2048 2048
ReadX 12723 2480 2048 2048
ReadX 12723 2464 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 2488 2048 2048
ReadX 12723 2568 8192 8192
ReadX 12723 1000 2048 2048
ReadX 12723 328 2048 2048
ReadX 12723 3840 2048 2048
ReadX 12723 2048 2048 2048
ReadX 12723 2560 2048 2048
ReadX 12723 920 2048 2048
WriteX 12723 2048 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 312 2048 2048
WriteX 12723 336 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 328 2048 2048
WriteX 12723 2560 2048 2048
WriteX 12723 3840 2048 2048
WriteX 12723 920 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2432 2048 2048
WriteX 12723 2432 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2456 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 0 2048 2048
ReadX 12723 328 2048 2048
ReadX 12723 2560 2048 2048
ReadX 12723 2048 2048 2048
ReadX 12723 3840 2048 2048
ReadX 12723 336 2048 2048
ReadX 12723 920 2048 2048
WriteX 12723 1536 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 2048 2048 2048
WriteX 12723 2560 2048 2048
WriteX 12723 336 2048 2048
WriteX 12723 920 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2048 2048 2048
ReadX 12723 2432 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 2048 2048 2048
WriteX 12723 2432 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2456 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1536 2048 2048
ReadX 12723 3840 2048 2048
ReadX 12723 336 2048 2048
ReadX 12723 920 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 1536 2048 2048
WriteX 12723 336 2048 2048
WriteX 12723 920 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2432 2048 2048
WriteX 12723 2432 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2456 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1536 2048 2048
ReadX 12723 3840 2048 2048
ReadX 12723 336 2048 2048
ReadX 12723 920 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 1536 2048 2048
WriteX 12723 336 2048 2048
WriteX 12723 920 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2432 2048 2048
WriteX 12723 2432 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2456 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1536 2048 2048
ReadX 12723 3840 2048 2048
ReadX 12723 336 2048 2048
ReadX 12723 920 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 1536 2048 2048
WriteX 12723 336 2048 2048
WriteX 12723 920 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2432 2048 2048
WriteX 12723 2432 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2456 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1536 2048 2048
ReadX 12723 3840 2048 2048
ReadX 12723 336 2048 2048
ReadX 12723 920 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 1536 2048 2048
WriteX 12723 336 2048 2048
WriteX 12723 920 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2432 2048 2048
WriteX 12723 2432 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 0 2048 2048
Flush 12723
ReadX 12723 2456 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1536 2048 2048
ReadX 12723 3840 2048 2048
ReadX 12723 336 2048 2048
ReadX 12723 920 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 1536 2048 2048
WriteX 12723 336 2048 2048
WriteX 12723 920 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2432 2048 2048
WriteX 12723 2432 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2624 6144 6144
ReadX 12723 2616 2048 2048
ReadX 12723 2688 2048 2048
ReadX 12723 2600 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 2616 2048 2048
ReadX 12723 2608 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 344 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 520 2048 2048
ReadX 12723 1392 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 400 2048 2048
ReadX 12723 528 2048 2048
ReadX 12723 536 2048 2048
ReadX 12723 824 2048 2048
ReadX 12723 832 2048 2048
ReadX 12723 384 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 408 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 528 2048 2048
ReadX 12723 552 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 824 2048 2048
ReadX 12723 840 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 768 2048 2048
ReadX 12723 2048 2048 2048
WriteX 12723 1415 1 1
WriteX 12723 352 2048 2048
WriteX 12723 1112 2048 2048
WriteX 12723 1400 2048 2048
WriteX 12723 1408 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 2048 2048 2048
WriteX 12723 768 2048 2048
WriteX 12723 344 2048 2048
WriteX 12723 1000 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 416 2048 2048
ReadX 12723 424 2048 2048
ReadX 12723 432 2048 2048
ReadX 12723 440 2048 2048
ReadX 12723 576 16384 16384
ReadX 12723 448 2048 2048
ReadX 12723 456 2048 2048
ReadX 12723 464 2048 2048
ReadX 12723 640 16384 16384
ReadX 12723 704 16384 16384
ReadX 12723 768 10240 10240
QUERY_FS_INFORMATION 259
ReadX 12723 848 2048 2048
ReadX 12723 560 2048 2048
ReadX 12723 808 2048 2048
QUERY_FS_INFORMATION 259
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 2600 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 352 2048 2048
ReadX 12723 1928 8192 8192
ReadX 12723 528 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 824 2048 2048
ReadX 12723 0 2048 2048
Flush 12723
ReadX 12723 2600 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 352 2048 2048
ReadX 12723 528 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 824 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 856 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 0 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 392 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 392 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 472 2048 2048
ReadX 12723 480 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 488 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 928 2048 2048
ReadX 12723 936 2048 2048
ReadX 12723 976 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 392 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 392 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 952 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 0 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 528 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 528 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 816 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 1384 2048 2048
QUERY_FS_INFORMATION 259
ReadX 12723 1336 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 528 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 528 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 0 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1240 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2200 4096 4096
ReadX 12723 2152 2048 2048
ReadX 12723 2160 2048 2048
ReadX 12723 528 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 1312 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 1928 2048 2048
ReadX 12723 528 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 824 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1416 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 352 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 528 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 824 2048 2048
ReadX 12723 384 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 528 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 824 2048 2048
QUERY_FS_INFORMATION 259
ReadX 12723 352 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 768 2048 2048
ReadX 12723 2048 2048 2048
ReadX 12723 352 2048 2048
WriteX 12723 1551 1 1
WriteX 12723 1512 2048 2048
WriteX 12723 1520 2048 2048
WriteX 12723 1528 2048 2048
WriteX 12723 1544 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 2048 2048 2048
WriteX 12723 768 2048 2048
WriteX 12723 344 2048 2048
WriteX 12723 1000 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2048 2048 2048
WriteX 12723 2048 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 1000 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 1240 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 344 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 384 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 768 2048 2048
WriteX 12723 1567 1 1
WriteX 12723 1552 2048 2048
WriteX 12723 1560 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 768 2048 2048
WriteX 12723 344 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 1328 2048 2048
ReadX 12723 0 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 1240 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2200 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 1240 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 344 2048 2048
ReadX 12723 384 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 2048 2048 2048
ReadX 12723 768 2048 2048
WriteX 12723 1583 1 1
WriteX 12723 1568 2048 2048
WriteX 12723 1576 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 2048 2048 2048
WriteX 12723 768 2048 2048
WriteX 12723 344 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 864 2048 2048
ReadX 12723 872 2048 2048
ReadX 12723 912 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 2688 2048 2048
ReadX 12723 1000 2048 2048
WriteX 12723 2688 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 0 2048 2048
ReadX 12723 2944 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 0 2048 2048
Flush 12723
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 2688 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 2688 2048 2048
WriteX 12723 2688 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 392 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 392 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 416 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 416 2048 2048
ReadX 12723 864 2048 2048
ReadX 12723 872 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 3840 2048 2048
ReadX 12723 312 2048 2048
ReadX 12723 888 2048 2048
ReadX 12723 400 2048 2048
ReadX 12723 896 2048 2048
WriteX 12723 1584 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 400 2048 2048
WriteX 12723 416 2048 2048
WriteX 12723 864 2048 2048
WriteX 12723 872 2048 2048
WriteX 12723 888 2048 2048
WriteX 12723 896 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 0 2048 2048
ReadX 12723 584 2048 2048
ReadX 12723 392 2048 2048
WriteX 12723 392 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 1328 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 392 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 0 2048 2048
ReadX 12723 408 2048 2048
ReadX 12723 1328 2048 2048
ReadX 12723 864 2048 2048
ReadX 12723 912 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 3840 2048 2048
ReadX 12723 312 2048 2048
ReadX 12723 1584 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 408 2048 2048
WriteX 12723 912 2048 2048
WriteX 12723 1584 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 0 2048 2048
ReadX 12723 408 2048 2048
ReadX 12723 392 2048 2048
WriteX 12723 392 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 528 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 528 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 552 2048 2048
ReadX 12723 1336 2048 2048
WriteX 12723 552 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 0 2048 2048
ReadX 12723 552 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 2664 2048 2048
ReadX 12723 2648 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 2672 2048 2048
ReadX 12723 2656 2048 2048
ReadX 12723 528 2048 2048
ReadX 12723 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12723 528 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 1336 2048 2048
ReadX 12723 2680 2048 2048
ReadX 12723 2760 8192 8192
ReadX 12723 544 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 568 2048 2048
ReadX 12723 544 2048 2048
ReadX 12723 0 2048 2048
Flush 12723
ReadX 12723 2816 6144 6144
ReadX 12723 2760 2048 2048
ReadX 12723 2744 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 2752 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 528 2048 2048
ReadX 12723 528 2048 2048
ReadX 12723 1384 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\INV.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x2 12727
Close 12727
Unlink \clients\client1\~dmtmp\ACCESS\INV.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x2 12729
WriteX 12729 4065 1 1
QUERY_FILE_INFORMATION 12729
WriteX 12729 0 62591 62591
Close 12729
ReadX 12723 0 2048 2048
ReadX 12723 2808 2048 2048
ReadX 12723 2792 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 2800 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 384 2048 2048
ReadX 12723 392 2048 2048
ReadX 12723 1384 2048 2048
ReadX 12723 2432 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\SALES.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x2 12731
Close 12731
Unlink \clients\client1\~dmtmp\ACCESS\SALES.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x2 12733
WriteX 12733 4094 1 1
QUERY_FILE_INFORMATION 12733
WriteX 12733 0 10845 10845
Close 12733
ReadX 12723 1432 2048 2048
ReadX 12723 1304 2048 2048
ReadX 12723 1368 2048 2048
ReadX 12723 2304 2048 2048
ReadX 12723 1440 2048 2048
ReadX 12723 1424 2048 2048
ReadX 12723 1448 2048 2048
ReadX 12723 1456 2048 2048
ReadX 12723 2432 2048 2048
ReadX 12723 1384 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\LABELS.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x2 12735
Close 12735
Unlink \clients\client1\~dmtmp\ACCESS\LABELS.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x2 12737
ReadX 12723 0 2048 2048
WriteX 12737 4081 1 1
QUERY_FILE_INFORMATION 12737
WriteX 12737 0 30118 30118
Close 12737
ReadX 12723 1344 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 1152 2048 2048
ReadX 12723 1152 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 1000 2048 2048
ReadX 12723 768 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 344 2048 2048
WriteX 12723 1000 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 1416 2048 2048
ReadX 12723 1416 2048 2048
ReadX 12723 344 2048 2048
ReadX 12723 896 2048 2048
WriteX 12723 1538 2 2
WriteX 12723 344 2048 2048
WriteX 12723 1416 2048 2048
WriteX 12723 1538 2 2
ReadX 12723 2048 2048 2048
WriteX 12723 2048 2048 2048
WriteX 12723 1538 2 2
Close 12723
Close 12725
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER.LDB
Unlink \clients\client1\~dmtmp\ACCESS\FASTENER.LDB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 12738
ReadX 12738 0 65471 65471
ReadX 12738 65471 63 63
ReadX 12738 65534 65471 65471
ReadX 12738 131005 63 63
ReadX 12738 131068 65471 65471
ReadX 12738 196539 63 63
ReadX 12738 196602 65471 65471
ReadX 12738 262073 63 63
ReadX 12738 262136 65471 65471
ReadX 12738 327607 63 63
ReadX 12738 327670 10 10
Close 12738
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 12739
ReadX 12739 0 65471 65471
ReadX 12739 65471 63 63
ReadX 12739 65534 65471 65471
ReadX 12739 131005 63 63
ReadX 12739 131068 65471 65471
ReadX 12739 196539 63 63
ReadX 12739 196602 65471 65471
ReadX 12739 262073 63 63
ReadX 12739 262136 65471 65471
ReadX 12739 327607 63 63
ReadX 12739 327670 65471 65471
ReadX 12739 393141 63 63
ReadX 12739 393204 65471 65471
ReadX 12739 458675 63 63
ReadX 12739 458738 65471 65471
ReadX 12739 524209 63 63
ReadX 12739 524272 65471 65471
ReadX 12739 589743 63 63
ReadX 12739 589806 65471 65471
ReadX 12739 655277 63 63
ReadX 12739 655340 32 32
Close 12739
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 12740
ReadX 12740 0 65471 65471
ReadX 12740 65471 63 63
ReadX 12740 65534 65471 65471
ReadX 12740 131005 63 63
ReadX 12740 131068 65471 65471
ReadX 12740 196539 63 63
ReadX 12740 196602 65471 65471
ReadX 12740 262073 63 63
ReadX 12740 262136 65471 65471
ReadX 12740 327607 63 63
ReadX 12740 327670 65471 65471
ReadX 12740 393141 63 63
ReadX 12740 393204 65471 65471
ReadX 12740 458675 63 63
ReadX 12740 458738 65471 65471
ReadX 12740 524209 63 63
ReadX 12740 524272 65471 65471
ReadX 12740 589743 63 63
ReadX 12740 589806 65471 65471
ReadX 12740 655277 63 63
ReadX 12740 655340 65471 65471
ReadX 12740 720811 63 63
ReadX 12740 720874 65471 65471
ReadX 12740 786345 63 63
ReadX 12740 786408 65471 65471
ReadX 12740 851879 63 63
ReadX 12740 851942 65471 65471
ReadX 12740 917413 63 63
ReadX 12740 917476 65471 65471
ReadX 12740 982947 63 63
ReadX 12740 983010 65471 65471
ReadX 12740 1048481 63 63
ReadX 12740 1048544 65471 65471
ReadX 12740 1114015 63 63
ReadX 12740 1114078 65471 65471
ReadX 12740 1179549 63 63
ReadX 12740 1179612 65471 65471
ReadX 12740 1245083 63 63
ReadX 12740 1245146 65471 65471
ReadX 12740 1310617 63 63
ReadX 12740 1310680 65471 65471
ReadX 12740 1376151 63 63
ReadX 12740 1376214 65471 65471
ReadX 12740 1441685 63 63
ReadX 12740 1441748 65471 65471
ReadX 12740 1507219 63 63
ReadX 12740 1507282 65471 65471
ReadX 12740 1572753 63 63
ReadX 12740 1572816 65471 65471
ReadX 12740 1638287 63 63
ReadX 12740 1638350 65471 65471
ReadX 12740 1703821 63 63
ReadX 12740 1703884 65471 65471
ReadX 12740 1769355 63 63
ReadX 12740 1769418 65471 65471
ReadX 12740 1834889 63 63
ReadX 12740 1834952 32824 32824
Close 12740
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\PCBENCHM 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12741
Close 12741
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12742
ReadX 12742 0 24 24
Close 12742
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12743
QUERY_FILE_INFORMATION 12743
ReadX 12743 0 512 512
ReadX 12743 464 512 512
ReadX 12743 498 512 512
ReadX 12743 472 512 512
ReadX 12743 466 512 512
ReadX 12743 978 512 512
ReadX 12743 497 57 57
Close 12743
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12744
QUERY_FILE_INFORMATION 12744
ReadX 12744 0 512 512
ReadX 12744 464 512 512
ReadX 12744 498 512 512
ReadX 12744 472 512 512
ReadX 12744 462 512 512
ReadX 12744 468 512 512
ReadX 12744 466 512 512
QUERY_FILE_INFORMATION 12744
WriteX 12744 482 60 60
WriteX 12744 482 4 4
QUERY_FILE_INFORMATION 12744
WriteX 12744 482 11 11
ReadX 12744 497 57 57
ReadX 12744 497 57 57
ReadX 12744 368 4096 4096
ReadX 12744 460 512 512
ReadX 12744 512 4096 4096
ReadX 12744 4608 4096 4096
ReadX 12744 8704 4096 4096
ReadX 12744 12800 4096 4096
ReadX 12744 16896 4096 4096
ReadX 12744 20992 4096 4096
ReadX 12744 25088 4096 4096
ReadX 12744 29184 4096 4096
ReadX 12744 33280 4096 4096
ReadX 12744 37376 4096 4096
ReadX 12744 41472 4096 4096
ReadX 12744 45568 4096 4096
ReadX 12744 49664 4096 4096
ReadX 12744 53760 4096 4096
ReadX 12744 57856 4096 4096
ReadX 12744 61952 4096 4096
ReadX 12744 66048 4096 4096
ReadX 12744 70144 4096 4096
ReadX 12744 497 20 20
ReadX 12744 496 103 103
ReadX 12744 500 448 448
ReadX 12744 470 512 512
ReadX 12744 486 2692 2692
ReadX 12744 290 4096 4096
ReadX 12744 4386 4096 4096
ReadX 12744 8482 4096 4096
ReadX 12744 500 20 20
ReadX 12744 483 108 108
ReadX 12744 482 292 292
ReadX 12744 338 4096 4096
ReadX 12744 4434 3103 3103
ReadX 12744 384 28 28
ReadX 12744 412 20 20
ReadX 12744 432 8 8
ReadX 12744 440 136 136
ReadX 12744 576 8 8
ReadX 12744 584 4 4
ReadX 12744 588 4 4
ReadX 12744 592 39 39
ReadX 12744 384 4 4
ReadX 12744 388 4 4
ReadX 12744 392 23 23
ReadX 12744 385 4 4
ReadX 12744 389 4 4
ReadX 12744 393 12 12
ReadX 12744 405 4 4
ReadX 12744 409 4 4
ReadX 12744 413 1 1
ReadX 12744 385 4 4
ReadX 12744 389 4 4
ReadX 12744 393 1 1
ReadX 12744 385 4 4
ReadX 12744 389 4 4
ReadX 12744 393 12 12
ReadX 12744 405 4 4
ReadX 12744 409 4 4
ReadX 12744 413 2 2
ReadX 12744 385 4 4
ReadX 12744 389 4 4
ReadX 12744 393 25 25
ReadX 12744 385 4 4
ReadX 12744 389 8 8
ReadX 12744 397 4 4
ReadX 12744 401 8 8
ReadX 12744 409 4 4
ReadX 12744 413 8 8
ReadX 12744 421 4 4
ReadX 12744 425 8 8
ReadX 12744 433 4 4
ReadX 12744 437 4 4
ReadX 12744 441 4 4
ReadX 12744 445 4 4
ReadX 12744 449 4 4
ReadX 12744 453 4 4
ReadX 12744 457 4 4
ReadX 12744 461 4 4
ReadX 12744 465 10670 10670
ReadX 12744 428 4096 4096
WriteX 12744 498 512 512
WriteX 12744 472 512 512
WriteX 12744 462 512 512
WriteX 12744 468 512 512
Close 12744
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12745
Close 12745
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12746
QUERY_FILE_INFORMATION 12746
ReadX 12746 0 512 512
ReadX 12746 464 512 512
ReadX 12746 498 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 12747
Close 12747
Unlink \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 12746
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 12749
WriteX 12749 4607 1 1
QUERY_FILE_INFORMATION 12749
WriteX 12749 0 65471 65471
WriteX 12749 65471 65 65
WriteX 12749 65536 19979 19979
Close 12749
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12750
QUERY_FILE_INFORMATION 12750
ReadX 12750 0 512 512
ReadX 12750 462 512 512
ReadX 12750 974 512 512
ReadX 12750 1486 512 512
ReadX 12750 460 512 512
QUERY_FILE_INFORMATION 12750
QUERY_FILE_INFORMATION 12750
QUERY_FILE_INFORMATION 12750
WriteX 12750 470 448 448
QUERY_FILE_INFORMATION 12750
WriteX 12750 470 60 60
WriteX 12750 470 4 4
QUERY_FILE_INFORMATION 12750
WriteX 12750 470 11 11
QUERY_FILE_INFORMATION 12750
QUERY_FILE_INFORMATION 12750
WriteX 12750 464 512 512
WriteX 12750 976 512 512
WriteX 12750 1488 512 512
WriteX 12750 462 512 512
WriteX 12750 0 512 512
QUERY_FILE_INFORMATION 12750
QUERY_FILE_INFORMATION 12750
ReadX 12750 470 512 512
WriteX 12750 482 512 512
WriteX 12750 482 292 292
QUERY_FILE_INFORMATION 12750
QUERY_FILE_INFORMATION 12750
WriteX 12750 483 20 20
WriteX 12750 483 108 108
QUERY_FILE_INFORMATION 12750
WriteX 12750 484 448 448
QUERY_FILE_INFORMATION 12750
WriteX 12750 484 44 44
WriteX 12750 484 20 20
WriteX 12750 480 512 512
WriteX 12750 472 512 512
WriteX 12750 476 512 512
WriteX 12750 988 512 512
WriteX 12750 474 512 512
Flush 12750
WriteX 12750 0 512 512
Flush 12750
QUERY_FILE_INFORMATION 12750
QUERY_FILE_INFORMATION 12750
QUERY_FILE_INFORMATION 12750
WriteX 12750 480 512 512
WriteX 12750 472 512 512
WriteX 12750 476 512 512
QUERY_FILE_INFORMATION 12750
WriteX 12750 496 320 320
QUERY_FILE_INFORMATION 12750
WriteX 12750 496 60 60
ReadX 12750 484 512 512
WriteX 12750 500 512 512
WriteX 12750 470 512 512
WriteX 12750 486 2692 2692
QUERY_FILE_INFORMATION 12750
QUERY_FILE_INFORMATION 12750
WriteX 12750 497 25 25
WriteX 12750 496 103 103
QUERY_FILE_INFORMATION 12750
QUERY_FILE_INFORMATION 12750
WriteX 12750 497 44 44
WriteX 12750 497 20 20
WriteX 12750 498 512 512
WriteX 12750 462 512 512
WriteX 12750 466 512 512
WriteX 12750 978 512 512
WriteX 12750 464 512 512
Flush 12750
WriteX 12750 0 512 512
Flush 12750
QUERY_FILE_INFORMATION 12750
QUERY_FILE_INFORMATION 12750
QUERY_FILE_INFORMATION 12750
WriteX 12750 497 7 7
WriteX 12750 497 57 57
WriteX 12750 498 512 512
WriteX 12750 472 512 512
WriteX 12750 462 512 512
WriteX 12750 466 512 512
WriteX 12750 978 512 512
Flush 12750
WriteX 12750 498 512 512
Flush 12750
Close 12750
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12751
QUERY_FILE_INFORMATION 12751
ReadX 12751 0 512 512
ReadX 12751 464 512 512
ReadX 12751 498 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\ZD16.BMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\ZD16.BMP 0x40 0x1 12752
ReadX 12752 0 20 20
ReadX 12752 14 40 40
ReadX 12752 54 64 64
ReadX 12752 118 1152 1152
Close 12752
Close 12751
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12753
Close 12753
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12754
ReadX 12754 0 24 24
Close 12754
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12755
QUERY_FILE_INFORMATION 12755
ReadX 12755 0 512 512
ReadX 12755 464 512 512
ReadX 12755 498 512 512
ReadX 12755 472 512 512
ReadX 12755 462 512 512
ReadX 12755 466 512 512
ReadX 12755 978 512 512
ReadX 12755 497 57 57
Close 12755
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12756
QUERY_FILE_INFORMATION 12756
ReadX 12756 0 512 512
ReadX 12756 464 512 512
ReadX 12756 498 512 512
ReadX 12756 472 512 512
ReadX 12756 468 512 512
ReadX 12756 462 512 512
ReadX 12756 466 512 512
QUERY_FILE_INFORMATION 12756
WriteX 12756 482 60 60
WriteX 12756 482 4 4
QUERY_FILE_INFORMATION 12756
WriteX 12756 482 11 11
WriteX 12756 498 512 512
WriteX 12756 472 512 512
WriteX 12756 462 512 512
WriteX 12756 466 512 512
WriteX 12756 978 512 512
Close 12756
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP 0x40 0x2 12757
Close 12757
Unlink \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x200000 0x1 12758
Close 12758
Rename \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 12760
WriteX 12760 4607 1 1
QUERY_FILE_INFORMATION 12760
WriteX 12760 0 65471 65471
WriteX 12760 65471 65 65
WriteX 12760 65536 17654 17654
Close 12760
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12761
QUERY_FILE_INFORMATION 12761
ReadX 12761 0 512 512
ReadX 12761 474 512 512
ReadX 12761 986 512 512
ReadX 12761 1498 512 512
ReadX 12761 472 512 512
QUERY_FILE_INFORMATION 12761
QUERY_FILE_INFORMATION 12761
QUERY_FILE_INFORMATION 12761
WriteX 12761 482 448 448
QUERY_FILE_INFORMATION 12761
WriteX 12761 482 60 60
WriteX 12761 482 4 4
QUERY_FILE_INFORMATION 12761
WriteX 12761 482 11 11
QUERY_FILE_INFORMATION 12761
QUERY_FILE_INFORMATION 12761
WriteX 12761 476 512 512
WriteX 12761 988 512 512
WriteX 12761 1500 512 512
WriteX 12761 474 512 512
WriteX 12761 0 512 512
QUERY_FILE_INFORMATION 12761
QUERY_FILE_INFORMATION 12761
ReadX 12761 482 512 512
WriteX 12761 494 512 512
WriteX 12761 494 292 292
QUERY_FILE_INFORMATION 12761
QUERY_FILE_INFORMATION 12761
WriteX 12761 495 20 20
WriteX 12761 495 108 108
QUERY_FILE_INFORMATION 12761
WriteX 12761 496 448 448
QUERY_FILE_INFORMATION 12761
WriteX 12761 496 44 44
WriteX 12761 496 20 20
WriteX 12761 492 512 512
WriteX 12761 484 512 512
WriteX 12761 488 512 512
WriteX 12761 1000 512 512
WriteX 12761 486 512 512
Flush 12761
WriteX 12761 0 512 512
Flush 12761
QUERY_FILE_INFORMATION 12761
QUERY_FILE_INFORMATION 12761
QUERY_FILE_INFORMATION 12761
WriteX 12761 492 512 512
WriteX 12761 484 512 512
WriteX 12761 488 512 512
QUERY_FILE_INFORMATION 12761
WriteX 12761 508 320 320
QUERY_FILE_INFORMATION 12761
WriteX 12761 508 60 60
ReadX 12761 496 512 512
WriteX 12761 512 512 512
WriteX 12761 482 512 512
WriteX 12761 498 2692 2692
QUERY_FILE_INFORMATION 12761
QUERY_FILE_INFORMATION 12761
WriteX 12761 509 25 25
WriteX 12761 508 103 103
QUERY_FILE_INFORMATION 12761
QUERY_FILE_INFORMATION 12761
WriteX 12761 509 44 44
WriteX 12761 509 20 20
WriteX 12761 510 512 512
WriteX 12761 474 512 512
WriteX 12761 478 512 512
WriteX 12761 990 512 512
WriteX 12761 476 512 512
Flush 12761
WriteX 12761 0 512 512
Flush 12761
QUERY_FILE_INFORMATION 12761
QUERY_FILE_INFORMATION 12761
QUERY_FILE_INFORMATION 12761
WriteX 12761 509 7 7
WriteX 12761 509 57 57
WriteX 12761 510 512 512
WriteX 12761 484 512 512
WriteX 12761 474 512 512
WriteX 12761 478 512 512
WriteX 12761 990 512 512
Flush 12761
WriteX 12761 510 512 512
Flush 12761
Close 12761
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12762
Close 12762
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12763
QUERY_FILE_INFORMATION 12763
ReadX 12763 0 512 512
ReadX 12763 476 512 512
ReadX 12763 510 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP 0x40 0x1 12764
Close 12764
Unlink \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA 0x40 0x1 12765
QUERY_FILE_INFORMATION 12765
ReadX 12765 0 512 512
ReadX 12765 512 512 512
ReadX 12765 770 512 512
ReadX 12765 1282 512 512
ReadX 12765 1794 512 512
ReadX 12765 2562 512 512
ReadX 12765 3586 512 512
ReadX 12765 3828 512 512
ReadX 12765 288 512 512
ReadX 12765 1024 512 512
ReadX 12765 954 512 512
ReadX 12765 295 512 512
ReadX 12765 320 512 512
ReadX 12765 322 512 512
ReadX 12765 834 512 512
ReadX 12765 1346 512 512
ReadX 12765 1858 512 512
ReadX 12765 323 512 512
ReadX 12765 835 512 512
ReadX 12765 1347 512 512
ReadX 12765 1859 512 512
ReadX 12765 2371 345 345
ReadX 12765 322 167 167
ReadX 12765 489 512 512
ReadX 12765 1001 512 512
ReadX 12765 1513 512 512
ReadX 12765 2025 512 512
ReadX 12765 2537 512 512
ReadX 12765 3049 512 512
ReadX 12765 3561 345 345
ReadX 12765 323 167 167
ReadX 12765 490 512 512
ReadX 12765 1002 512 512
ReadX 12765 1514 512 512
ReadX 12765 2026 512 512
ReadX 12765 2538 512 512
ReadX 12765 3050 512 512
ReadX 12765 3562 512 512
ReadX 12765 4074 512 512
ReadX 12765 4586 512 512
ReadX 12765 5098 512 512
ReadX 12765 5610 512 512
ReadX 12765 6122 512 512
ReadX 12765 6634 512 512
ReadX 12765 7146 512 512
ReadX 12765 7658 512 512
ReadX 12765 8170 512 512
ReadX 12765 8682 512 512
ReadX 12765 9194 512 512
ReadX 12765 9706 512 512
ReadX 12765 10218 512 512
ReadX 12765 10730 345 345
ReadX 12765 11075 512 512
ReadX 12765 11587 167 167
ReadX 12765 11754 512 512
ReadX 12765 12266 512 512
ReadX 12765 12778 512 512
ReadX 12765 13290 512 512
ReadX 12765 13802 512 512
ReadX 12765 14314 512 512
ReadX 12765 14826 512 512
ReadX 12765 15338 512 512
ReadX 12765 337 512 512
ReadX 12765 337 512 512
ReadX 12765 849 34 34
ReadX 12765 352 512 512
ReadX 12765 864 512 512
ReadX 12765 1376 512 512
ReadX 12765 1888 512 512
ReadX 12765 2400 512 512
ReadX 12765 2912 512 512
ReadX 12765 3424 512 512
ReadX 12765 3936 512 512
ReadX 12765 1632 512 512
ReadX 12765 2144 512 512
ReadX 12765 1682 512 512
ReadX 12765 258 512 512
ReadX 12765 360 144 144
ReadX 12765 2517 512 512
ReadX 12765 3029 512 512
ReadX 12765 1751 512 512
ReadX 12765 2263 512 512
ReadX 12765 2775 512 512
ReadX 12765 3287 512 512
ReadX 12765 3799 512 512
ReadX 12765 4311 512 512
ReadX 12765 4823 512 512
ReadX 12765 5335 512 512
ReadX 12765 5847 512 512
ReadX 12765 6359 512 512
ReadX 12765 6871 512 512
ReadX 12765 7383 512 512
ReadX 12765 7895 512 512
ReadX 12765 8407 512 512
ReadX 12765 8919 512 512
ReadX 12765 9431 512 512
ReadX 12765 9943 512 512
ReadX 12765 10455 512 512
ReadX 12765 10967 512 512
ReadX 12765 11479 512 512
ReadX 12765 2556 512 512
ReadX 12765 3068 512 512
ReadX 12765 3580 512 512
ReadX 12765 4092 512 512
ReadX 12765 4604 512 512
ReadX 12765 5116 512 512
ReadX 12765 5628 512 512
ReadX 12765 6140 512 512
ReadX 12765 6652 512 512
ReadX 12765 7164 512 512
ReadX 12765 7676 512 512
ReadX 12765 8188 512 512
ReadX 12765 8700 512 512
ReadX 12765 9212 512 512
ReadX 12765 9724 512 512
ReadX 12765 10236 512 512
ReadX 12765 10748 512 512
ReadX 12765 11260 512 512
ReadX 12765 11772 512 512
ReadX 12765 12284 512 512
ReadX 12765 12796 49 49
ReadX 12765 260 463 463
ReadX 12765 723 512 512
ReadX 12765 1235 512 512
ReadX 12765 1747 512 512
ReadX 12765 2259 512 512
ReadX 12765 2771 512 512
ReadX 12765 3283 512 512
ReadX 12765 3795 512 512
ReadX 12765 4307 512 512
ReadX 12765 4819 512 512
ReadX 12765 5331 512 512
ReadX 12765 5843 512 512
ReadX 12765 6355 512 512
ReadX 12765 6867 512 512
ReadX 12765 7379 512 512
ReadX 12765 7891 512 512
ReadX 12765 8403 512 512
ReadX 12765 8915 512 512
ReadX 12765 9427 512 512
ReadX 12765 9939 512 512
ReadX 12765 10451 512 512
ReadX 12765 10963 402 402
ReadX 12765 593 240 240
ReadX 12765 2048 272 272
ReadX 12765 2320 512 512
ReadX 12765 2832 512 512
ReadX 12765 3344 512 512
ReadX 12765 3856 512 512
ReadX 12765 4368 512 512
ReadX 12765 4880 512 512
ReadX 12765 5392 240 240
ReadX 12765 608 272 272
ReadX 12765 880 512 512
ReadX 12765 1392 512 512
ReadX 12765 1904 512 512
ReadX 12765 2416 512 512
ReadX 12765 2928 512 512
ReadX 12765 3440 512 512
ReadX 12765 3952 512 512
ReadX 12765 4464 512 512
ReadX 12765 4976 512 512
ReadX 12765 5488 512 512
ReadX 12765 6000 512 512
ReadX 12765 6512 512 512
ReadX 12765 7024 512 512
ReadX 12765 7536 512 512
ReadX 12765 8048 512 512
ReadX 12765 8560 512 512
ReadX 12765 9072 512 512
ReadX 12765 9584 512 512
ReadX 12765 10096 512 512
ReadX 12765 1683 512 512
ReadX 12765 514 512 512
ReadX 12765 620 512 512
ReadX 12765 770 512 512
ReadX 12765 1282 512 512
ReadX 12765 1794 512 512
ReadX 12765 2000 512 512
ReadX 12765 1434 512 512
ReadX 12765 2050 512 512
ReadX 12765 2118 512 512
ReadX 12765 1715 512 512
ReadX 12765 1024 512 512
ReadX 12765 954 512 512
ReadX 12765 1880 512 512
ReadX 12765 1286 512 512
ReadX 12765 1510 512 512
ReadX 12765 2562 512 512
ReadX 12765 2610 512 512
ReadX 12765 3586 512 512
ReadX 12765 3812 512 512
ReadX 12765 3828 512 512
ReadX 12765 4046 512 512
ReadX 12765 4066 512 512
ReadX 12765 1747 512 512
ReadX 12765 1026 512 512
ReadX 12765 1538 512 512
ReadX 12765 514 512 512
ReadX 12765 751 512 512
ReadX 12765 1263 512 512
ReadX 12765 620 512 512
ReadX 12765 1132 512 512
ReadX 12765 1644 512 512
ReadX 12765 2156 512 512
ReadX 12765 2668 512 512
ReadX 12765 3180 512 512
ReadX 12765 3692 512 512
ReadX 12765 4204 394 394
ReadX 12765 606 118 118
ReadX 12765 724 512 512
ReadX 12765 1236 512 512
ReadX 12765 1748 512 512
ReadX 12765 2260 512 512
ReadX 12765 2772 512 512
ReadX 12765 3284 512 512
ReadX 12765 3796 394 394
ReadX 12765 636 118 118
ReadX 12765 754 512 512
ReadX 12765 1266 512 512
ReadX 12765 1778 512 512
ReadX 12765 2290 512 512
ReadX 12765 2802 512 512
ReadX 12765 3314 512 512
ReadX 12765 3826 512 512
ReadX 12765 4338 512 512
ReadX 12765 4850 512 512
ReadX 12765 5362 512 512
ReadX 12765 5874 512 512
ReadX 12765 6386 512 512
ReadX 12765 6898 512 512
ReadX 12765 7410 512 512
ReadX 12765 7922 512 512
ReadX 12765 8434 512 512
ReadX 12765 8946 512 512
ReadX 12765 9458 512 512
ReadX 12765 9970 512 512
ReadX 12765 10482 512 512
ReadX 12765 723 512 512
ReadX 12765 1235 512 512
ReadX 12765 725 512 512
ReadX 12765 729 512 512
ReadX 12765 1241 512 512
ReadX 12765 1753 512 512
ReadX 12765 2265 512 512
ReadX 12765 2777 512 512
ReadX 12765 3289 512 512
ReadX 12765 3801 512 512
ReadX 12765 4313 512 512
ReadX 12765 4825 512 512
ReadX 12765 5337 512 512
ReadX 12765 5849 512 512
ReadX 12765 6361 512 512
ReadX 12765 755 512 512
ReadX 12765 1267 512 512
ReadX 12765 1779 512 512
ReadX 12765 2291 512 512
ReadX 12765 2803 512 512
ReadX 12765 3315 512 512
ReadX 12765 3827 512 512
ReadX 12765 4339 244 244
ReadX 12765 4583 512 512
ReadX 12765 5095 268 268
ReadX 12765 5363 512 512
ReadX 12765 5875 512 512
ReadX 12765 6387 512 512
ReadX 12765 6899 512 512
ReadX 12765 7411 512 512
ReadX 12765 7923 512 512
ReadX 12765 8435 512 512
ReadX 12765 8947 512 512
ReadX 12765 9459 512 512
ReadX 12765 9971 512 512
ReadX 12765 10483 512 512
ReadX 12765 10995 512 512
ReadX 12765 11507 512 512
ReadX 12765 12019 512 512
ReadX 12765 12531 512 512
ReadX 12765 13043 512 512
ReadX 12765 13555 512 512
ReadX 12765 14067 512 512
ReadX 12765 14579 512 512
ReadX 12765 15091 512 512
ReadX 12765 15603 342 342
ReadX 12765 725 512 512
ReadX 12765 2000 512 512
ReadX 12765 3918 512 512
ReadX 12765 727 512 512
ReadX 12765 258 512 512
ReadX 12765 376 512 512
ReadX 12765 1109 512 512
ReadX 12765 1028 512 512
ReadX 12765 1540 512 512
ReadX 12765 2052 512 512
ReadX 12765 2564 512 512
ReadX 12765 3076 512 512
ReadX 12765 3588 512 512
ReadX 12765 4100 512 512
ReadX 12765 4612 412 412
ReadX 12765 1012 100 100
ReadX 12765 1112 512 512
ReadX 12765 1624 512 512
ReadX 12765 2136 512 512
ReadX 12765 2648 512 512
ReadX 12765 3160 512 512
ReadX 12765 3672 512 512
ReadX 12765 4184 412 412
ReadX 12765 1044 100 100
ReadX 12765 1144 512 512
ReadX 12765 1656 512 512
ReadX 12765 2168 512 512
ReadX 12765 2680 512 512
ReadX 12765 3192 512 512
ReadX 12765 3704 512 512
ReadX 12765 4216 512 512
ReadX 12765 4728 512 512
ReadX 12765 5240 512 512
ReadX 12765 5752 512 512
ReadX 12765 6264 512 512
ReadX 12765 6776 512 512
QUERY_FS_INFORMATION 259
ReadX 12765 7288 512 512
ReadX 12765 7800 512 512
ReadX 12765 8312 512 512
ReadX 12765 8824 512 512
ReadX 12765 9336 512 512
ReadX 12765 9848 512 512
ReadX 12765 10360 512 512
ReadX 12765 10872 512 512
ReadX 12765 11384 512 512
ReadX 12765 11896 512 512
ReadX 12765 12408 512 512
ReadX 12765 1088 512 512
ReadX 12765 1600 512 512
ReadX 12765 1090 512 512
ReadX 12765 1094 512 512
ReadX 12765 1606 512 512
ReadX 12765 2118 512 512
ReadX 12765 2630 512 512
ReadX 12765 3142 512 512
ReadX 12765 3654 512 512
ReadX 12765 4166 512 512
ReadX 12765 4678 512 512
ReadX 12765 1111 512 512
ReadX 12765 1623 512 512
ReadX 12765 2135 512 512
ReadX 12765 2647 512 512
ReadX 12765 3159 512 512
ReadX 12765 3671 512 512
ReadX 12765 4183 512 512
ReadX 12765 4695 512 512
ReadX 12765 5207 512 512
ReadX 12765 5719 512 512
ReadX 12765 6231 512 512
ReadX 12765 6743 512 512
ReadX 12765 7255 512 512
ReadX 12765 7767 512 512
ReadX 12765 8279 512 512
ReadX 12765 8791 512 512
ReadX 12765 9303 512 512
ReadX 12765 9815 512 512
ReadX 12765 10327 512 512
ReadX 12765 10839 512 512
ReadX 12765 11351 294 294
ReadX 12765 1091 512 512
ReadX 12765 970 512 512
ReadX 12765 1093 512 512
ReadX 12765 1434 512 512
ReadX 12765 2050 512 512
ReadX 12765 2158 512 512
ReadX 12765 2118 512 512
ReadX 12765 2630 512 512
ReadX 12765 3142 512 512
ReadX 12765 3654 512 512
ReadX 12765 4166 512 512
ReadX 12765 4678 512 512
ReadX 12765 5190 512 512
ReadX 12765 5702 382 382
ReadX 12765 2104 130 130
ReadX 12765 2234 512 512
ReadX 12765 2746 512 512
ReadX 12765 3258 512 512
ReadX 12765 3770 512 512
ReadX 12765 4282 512 512
ReadX 12765 4794 512 512
ReadX 12765 5306 382 382
ReadX 12765 2134 130 130
ReadX 12765 2264 512 512
ReadX 12765 2776 512 512
ReadX 12765 3288 512 512
ReadX 12765 3800 512 512
ReadX 12765 4312 512 512
ReadX 12765 4824 512 512
ReadX 12765 5336 512 512
ReadX 12765 2147 512 512
ReadX 12765 2149 512 512
ReadX 12765 2152 512 512
ReadX 12765 2664 512 512
ReadX 12765 3176 512 512
ReadX 12765 3688 512 512
ReadX 12765 2159 512 512
ReadX 12765 2671 512 512
ReadX 12765 3183 512 512
ReadX 12765 3695 512 512
ReadX 12765 4207 512 512
ReadX 12765 4719 512 512
ReadX 12765 5231 512 512
ReadX 12765 5743 512 512
ReadX 12765 6255 512 512
ReadX 12765 6767 512 512
ReadX 12765 7279 512 512
ReadX 12765 7791 512 512
ReadX 12765 8303 512 512
ReadX 12765 8815 512 512
ReadX 12765 9327 512 512
ReadX 12765 9839 512 512
ReadX 12765 10351 512 512
ReadX 12765 10863 512 512
ReadX 12765 11375 512 512
ReadX 12765 11887 512 512
ReadX 12765 12399 38 38
ReadX 12765 2149 512 512
ReadX 12765 1794 512 512
ReadX 12765 2016 512 512
ReadX 12765 2151 512 512
ReadX 12765 1918 512 512
ReadX 12765 1880 512 512
ReadX 12765 2392 512 512
ReadX 12765 2904 512 512
ReadX 12765 3416 512 512
ReadX 12765 3928 512 512
ReadX 12765 4440 512 512
ReadX 12765 4952 512 512
ReadX 12765 5464 416 416
ReadX 12765 1866 96 96
ReadX 12765 1962 512 512
ReadX 12765 2474 512 512
ReadX 12765 2986 512 512
ReadX 12765 3498 512 512
ReadX 12765 4010 512 512
ReadX 12765 4522 512 512
ReadX 12765 5034 416 416
ReadX 12765 1896 96 96
ReadX 12765 1992 512 512
ReadX 12765 2504 512 512
ReadX 12765 3016 512 512
ReadX 12765 3528 512 512
ReadX 12765 1903 512 512
ReadX 12765 1905 512 512
ReadX 12765 1908 512 512
ReadX 12765 2420 512 512
ReadX 12765 2932 512 512
ReadX 12765 3444 512 512
ReadX 12765 3956 512 512
ReadX 12765 1919 512 512
ReadX 12765 2431 512 512
ReadX 12765 2943 512 512
ReadX 12765 3455 512 512
ReadX 12765 3967 512 512
ReadX 12765 4479 512 512
ReadX 12765 4991 512 512
ReadX 12765 5503 512 512
ReadX 12765 6015 512 512
ReadX 12765 6527 512 512
ReadX 12765 7039 512 512
ReadX 12765 7551 512 512
ReadX 12765 8063 512 512
ReadX 12765 8575 512 512
ReadX 12765 9087 512 512
ReadX 12765 9599 512 512
ReadX 12765 10111 512 512
ReadX 12765 10623 512 512
ReadX 12765 11135 512 512
ReadX 12765 11647 512 512
ReadX 12765 12159 322 322
ReadX 12765 1905 512 512
ReadX 12765 1846 512 512
ReadX 12765 1907 512 512
ReadX 12765 1860 268 268
ReadX 12765 1832 244 244
ReadX 12765 1846 512 512
ReadX 12765 2358 512 512
ReadX 12765 2870 512 512
ReadX 12765 3382 512 512
ReadX 12765 3894 512 512
ReadX 12765 4406 512 512
ReadX 12765 4918 512 512
ReadX 12765 1858 512 512
ReadX 12765 1859 512 512
ReadX 12765 1860 488 488
ReadX 12765 1832 24 24
ReadX 12765 1861 228 228
ReadX 12765 1832 284 284
ReadX 12765 2116 512 512
ReadX 12765 2628 512 512
ReadX 12765 3140 512 512
ReadX 12765 3652 512 512
ReadX 12765 4164 512 512
ReadX 12765 4676 512 512
ReadX 12765 5188 228 228
ReadX 12765 1862 284 284
ReadX 12765 2146 512 512
ReadX 12765 2658 38 38
ReadX 12765 1859 512 512
ReadX 12765 2047 512 512
ReadX 12765 2016 512 512
ReadX 12765 2528 512 512
ReadX 12765 3040 512 512
ReadX 12765 3552 512 512
ReadX 12765 4064 512 512
ReadX 12765 4576 512 512
ReadX 12765 5088 512 512
ReadX 12765 5600 424 424
ReadX 12765 2002 88 88
ReadX 12765 2090 512 512
ReadX 12765 2602 512 512
ReadX 12765 3114 512 512
ReadX 12765 3626 512 512
ReadX 12765 4138 512 512
ReadX 12765 4650 512 512
ReadX 12765 5162 424 424
ReadX 12765 2032 88 88
ReadX 12765 2120 512 512
ReadX 12765 2632 512 512
ReadX 12765 3144 512 512
ReadX 12765 3656 512 512
ReadX 12765 4168 512 512
ReadX 12765 4680 512 512
ReadX 12765 5192 512 512
ReadX 12765 2044 512 512
ReadX 12765 2045 512 512
ReadX 12765 2046 512 512
ReadX 12765 2047 512 512
ReadX 12765 2559 110 110
ReadX 12765 2052 402 402
ReadX 12765 2454 512 512
ReadX 12765 2966 512 512
ReadX 12765 3478 512 512
ReadX 12765 3990 512 512
ReadX 12765 4502 512 512
ReadX 12765 5014 512 512
ReadX 12765 5526 512 512
ReadX 12765 6038 512 512
ReadX 12765 6550 512 512
ReadX 12765 7062 512 512
ReadX 12765 7574 512 512
ReadX 12765 8086 512 512
ReadX 12765 8598 512 512
ReadX 12765 9110 512 512
ReadX 12765 9622 512 512
ReadX 12765 10134 512 512
ReadX 12765 10646 512 512
ReadX 12765 11158 512 512
ReadX 12765 11670 512 512
ReadX 12765 12182 512 512
ReadX 12765 12694 118 118
ReadX 12765 2045 512 512
ReadX 12765 1282 512 512
ReadX 12765 1343 512 512
ReadX 12765 1286 512 512
ReadX 12765 1798 512 512
ReadX 12765 2310 512 512
ReadX 12765 2822 512 512
ReadX 12765 3334 512 512
ReadX 12765 3846 512 512
ReadX 12765 4358 512 512
ReadX 12765 4870 416 416
ReadX 12765 1270 96 96
ReadX 12765 1366 512 512
ReadX 12765 1878 512 512
ReadX 12765 2390 512 512
ReadX 12765 2902 512 512
ReadX 12765 3414 512 512
ReadX 12765 3926 416 416
ReadX 12765 1284 96 96
ReadX 12765 1380 416 416
ReadX 12765 1302 96 96
ReadX 12765 1398 512 512
ReadX 12765 1910 512 512
ReadX 12765 2422 512 512
ReadX 12765 2934 512 512
ReadX 12765 3446 512 512
ReadX 12765 3958 512 512
ReadX 12765 4470 512 512
ReadX 12765 4982 512 512
ReadX 12765 5494 512 512
ReadX 12765 6006 512 512
ReadX 12765 6518 512 512
ReadX 12765 7030 512 512
ReadX 12765 7542 512 512
ReadX 12765 1328 512 512
ReadX 12765 1330 512 512
ReadX 12765 1333 512 512
ReadX 12765 1845 512 512
ReadX 12765 2357 512 512
ReadX 12765 2869 512 512
ReadX 12765 3381 512 512
ReadX 12765 1344 512 512
ReadX 12765 1856 512 512
ReadX 12765 2368 512 512
ReadX 12765 2880 512 512
ReadX 12765 3392 512 512
ReadX 12765 3904 512 512
ReadX 12765 4416 512 512
ReadX 12765 4928 512 512
ReadX 12765 5440 512 512
ReadX 12765 5952 512 512
ReadX 12765 6464 512 512
ReadX 12765 6976 512 512
ReadX 12765 7488 512 512
ReadX 12765 8000 512 512
ReadX 12765 8512 512 512
ReadX 12765 9024 512 512
ReadX 12765 9536 512 512
ReadX 12765 10048 512 512
ReadX 12765 10560 512 512
ReadX 12765 11072 512 512
ReadX 12765 11584 426 426
ReadX 12765 1330 512 512
ReadX 12765 1842 512 512
ReadX 12765 1250 512 512
ReadX 12765 1264 268 268
ReadX 12765 1236 244 244
ReadX 12765 1250 512 512
ReadX 12765 1762 512 512
ReadX 12765 2274 512 512
ReadX 12765 2786 512 512
ReadX 12765 3298 512 512
ReadX 12765 3810 512 512
ReadX 12765 4322 512 512
ReadX 12765 1262 512 512
ReadX 12765 1263 512 512
ReadX 12765 1264 488 488
ReadX 12765 1236 24 24
ReadX 12765 1265 228 228
ReadX 12765 1236 284 284
ReadX 12765 1520 512 512
ReadX 12765 2032 512 512
ReadX 12765 2544 512 512
ReadX 12765 3056 512 512
ReadX 12765 3568 512 512
ReadX 12765 4080 512 512
ReadX 12765 4592 228 228
ReadX 12765 1266 284 284
ReadX 12765 1550 512 512
ReadX 12765 2062 42 42
ReadX 12765 1263 512 512
ReadX 12765 1538 512 512
ReadX 12765 1640 512 512
ReadX 12765 1510 512 512
ReadX 12765 2022 512 512
ReadX 12765 2534 512 512
ReadX 12765 3046 512 512
ReadX 12765 3558 512 512
ReadX 12765 4070 512 512
ReadX 12765 4582 512 512
ReadX 12765 5094 408 408
ReadX 12765 1496 104 104
ReadX 12765 1600 512 512
ReadX 12765 2112 512 512
ReadX 12765 2624 512 512
ReadX 12765 3136 512 512
ReadX 12765 3648 512 512
ReadX 12765 4160 512 512
ReadX 12765 4672 408 408
ReadX 12765 1526 104 104
ReadX 12765 1630 512 512
ReadX 12765 2142 512 512
ReadX 12765 2654 512 512
ReadX 12765 3166 512 512
ReadX 12765 3678 512 512
ReadX 12765 4190 408 408
ReadX 12765 1540 104 104
ReadX 12765 1644 512 512
ReadX 12765 2156 512 512
ReadX 12765 2668 512 512
ReadX 12765 3180 512 512
ReadX 12765 3692 512 512
ReadX 12765 4204 512 512
ReadX 12765 4716 512 512
ReadX 12765 5228 512 512
ReadX 12765 5740 512 512
ReadX 12765 6252 512 512
ReadX 12765 6764 512 512
ReadX 12765 7276 512 512
ReadX 12765 7788 512 512
ReadX 12765 8300 512 512
ReadX 12765 8812 512 512
ReadX 12765 9324 512 512
ReadX 12765 9836 512 512
ReadX 12765 10348 512 512
ReadX 12765 10860 512 512
ReadX 12765 11372 512 512
ReadX 12765 1615 512 512
ReadX 12765 2127 512 512
ReadX 12765 1617 512 512
ReadX 12765 1621 512 512
ReadX 12765 2133 512 512
ReadX 12765 2645 512 512
ReadX 12765 3157 512 512
ReadX 12765 3669 512 512
ReadX 12765 4181 512 512
ReadX 12765 4693 512 512
ReadX 12765 5205 512 512
ReadX 12765 5717 512 512
ReadX 12765 6229 512 512
ReadX 12765 1641 512 512
ReadX 12765 2153 512 512
ReadX 12765 2665 512 512
ReadX 12765 3177 512 512
ReadX 12765 3689 512 512
ReadX 12765 4201 512 512
ReadX 12765 4713 512 512
ReadX 12765 5225 512 512
ReadX 12765 5737 512 512
ReadX 12765 6249 512 512
ReadX 12765 6761 512 512
ReadX 12765 7273 512 512
ReadX 12765 7785 512 512
ReadX 12765 8297 512 512
ReadX 12765 8809 512 512
ReadX 12765 9321 512 512
ReadX 12765 9833 512 512
ReadX 12765 10345 512 512
ReadX 12765 10857 512 512
ReadX 12765 11369 512 512
ReadX 12765 11881 2 2
ReadX 12765 1796 510 510
ReadX 12765 2306 512 512
ReadX 12765 2818 512 512
ReadX 12765 3330 512 512
ReadX 12765 3842 512 512
ReadX 12765 4354 512 512
ReadX 12765 4866 512 512
ReadX 12765 5378 512 512
ReadX 12765 5890 512 512
ReadX 12765 6402 512 512
ReadX 12765 6914 512 512
ReadX 12765 7426 512 512
ReadX 12765 7938 512 512
ReadX 12765 8450 512 512
ReadX 12765 8962 512 512
ReadX 12765 9474 512 512
ReadX 12765 9986 512 512
ReadX 12765 10498 326 326
ReadX 12765 1617 512 512
ReadX 12765 2129 512 512
ReadX 12765 1450 512 512
ReadX 12765 1621 512 512
ReadX 12765 1446 512 512
ReadX 12765 1450 512 512
ReadX 12765 1962 512 512
ReadX 12765 2474 512 512
ReadX 12765 2986 512 512
ReadX 12765 3498 512 512
ReadX 12765 4010 512 512
ReadX 12765 4522 512 512
ReadX 12765 5034 424 424
ReadX 12765 1436 88 88
ReadX 12765 1524 512 512
ReadX 12765 2036 512 512
ReadX 12765 2548 512 512
ReadX 12765 3060 512 512
ReadX 12765 1442 512 512
ReadX 12765 1443 512 512
ReadX 12765 1444 512 512
ReadX 12765 1446 512 512
ReadX 12765 1958 386 386
ReadX 12765 1466 126 126
ReadX 12765 1592 512 512
ReadX 12765 2104 512 512
ReadX 12765 2616 512 512
ReadX 12765 3128 512 512
ReadX 12765 3640 512 512
ReadX 12765 4152 512 512
ReadX 12765 4664 512 512
ReadX 12765 5176 512 512
ReadX 12765 5688 512 512
ReadX 12765 6200 512 512
ReadX 12765 6712 512 512
ReadX 12765 7224 512 512
ReadX 12765 7736 512 512
ReadX 12765 8248 512 512
ReadX 12765 8760 294 294
ReadX 12765 1443 512 512
ReadX 12765 964 512 512
ReadX 12765 970 512 512
ReadX 12765 1482 512 512
ReadX 12765 1994 512 512
ReadX 12765 2506 512 512
ReadX 12765 3018 512 512
ReadX 12765 3530 512 512
ReadX 12765 4042 512 512
ReadX 12765 4554 424 424
ReadX 12765 956 88 88
ReadX 12765 1044 512 512
ReadX 12765 1556 512 512
ReadX 12765 2068 512 512
ReadX 12765 2580 512 512
ReadX 12765 962 512 512
ReadX 12765 963 512 512
ReadX 12765 964 512 512
ReadX 12765 965 512 512
ReadX 12765 1477 512 512
ReadX 12765 1989 228 228
ReadX 12765 986 284 284
ReadX 12765 1270 512 512
ReadX 12765 1782 512 512
ReadX 12765 2294 512 512
ReadX 12765 2806 512 512
ReadX 12765 3318 512 512
ReadX 12765 3830 512 512
ReadX 12765 4342 512 512
ReadX 12765 4854 512 512
ReadX 12765 5366 512 512
ReadX 12765 5878 512 512
ReadX 12765 6390 512 512
ReadX 12765 6902 512 512
ReadX 12765 7414 42 42
ReadX 12765 963 512 512
ReadX 12765 2610 512 512
ReadX 12765 3812 512 512
ReadX 12765 3828 512 512
ReadX 12765 3969 512 512
ReadX 12765 3918 512 512
ReadX 12765 4430 512 512
ReadX 12765 4942 512 512
ReadX 12765 5454 512 512
ReadX 12765 5966 512 512
ReadX 12765 6478 512 512
ReadX 12765 6990 512 512
ReadX 12765 7502 424 424
ReadX 12765 3904 88 88
ReadX 12765 3992 512 512
ReadX 12765 4504 512 512
ReadX 12765 5016 512 512
ReadX 12765 5528 512 512
ReadX 12765 6040 512 512
ReadX 12765 6552 512 512
ReadX 12765 7064 424 424
ReadX 12765 3934 88 88
ReadX 12765 4022 512 512
ReadX 12765 4534 512 512
ReadX 12765 5046 512 512
ReadX 12765 5558 512 512
ReadX 12765 6070 512 512
ReadX 12765 6582 512 512
ReadX 12765 7094 512 512
ReadX 12765 7606 512 512
ReadX 12765 8118 512 512
ReadX 12765 8630 512 512
ReadX 12765 3953 512 512
ReadX 12765 4465 512 512
ReadX 12765 3956 512 512
ReadX 12765 3964 512 512
ReadX 12765 4476 512 512
ReadX 12765 4988 512 512
ReadX 12765 3970 512 512
ReadX 12765 4482 512 512
ReadX 12765 4994 512 512
ReadX 12765 5506 512 512
ReadX 12765 6018 512 512
ReadX 12765 6530 512 512
ReadX 12765 7042 512 512
ReadX 12765 7554 512 512
ReadX 12765 8066 512 512
ReadX 12765 8578 512 512
ReadX 12765 9090 512 512
ReadX 12765 9602 512 512
ReadX 12765 10114 512 512
ReadX 12765 10626 512 512
ReadX 12765 11138 512 512
ReadX 12765 11650 512 512
ReadX 12765 12162 512 512
ReadX 12765 12674 512 512
ReadX 12765 13186 512 512
ReadX 12765 13698 512 512
ReadX 12765 14210 134 134
ReadX 12765 3956 512 512
ReadX 12765 4468 512 512
ReadX 12765 4980 512 512
ReadX 12765 5492 512 512
ReadX 12765 3074 512 512
ReadX 12765 3246 512 512
ReadX 12765 3964 512 512
ReadX 12765 3330 512 512
ReadX 12765 3465 512 512
ReadX 12765 3246 512 512
ReadX 12765 3758 512 512
ReadX 12765 4270 512 512
ReadX 12765 4782 512 512
ReadX 12765 5294 512 512
ReadX 12765 5806 512 512
ReadX 12765 6318 512 512
ReadX 12765 6830 368 368
ReadX 12765 3232 144 144
ReadX 12765 3376 512 512
ReadX 12765 3888 512 512
ReadX 12765 4400 512 512
ReadX 12765 4912 512 512
ReadX 12765 5424 512 512
ReadX 12765 5936 512 512
ReadX 12765 6448 368 368
ReadX 12765 3262 144 144
ReadX 12765 3406 512 512
ReadX 12765 3918 512 512
ReadX 12765 4430 512 512
ReadX 12765 4942 512 512
ReadX 12765 5454 512 512
ReadX 12765 5966 512 512
ReadX 12765 6478 512 512
ReadX 12765 6990 512 512
ReadX 12765 7502 512 512
ReadX 12765 8014 512 512
ReadX 12765 8526 512 512
ReadX 12765 9038 512 512
ReadX 12765 9550 512 512
ReadX 12765 10062 512 512
ReadX 12765 10574 512 512
ReadX 12765 11086 512 512
ReadX 12765 11598 512 512
ReadX 12765 12110 512 512
ReadX 12765 12622 512 512
ReadX 12765 13134 512 512
ReadX 12765 13646 368 368
ReadX 12765 3332 144 144
ReadX 12765 3476 512 512
ReadX 12765 3988 512 512
ReadX 12765 4500 512 512
ReadX 12765 5012 512 512
ReadX 12765 5524 512 512
ReadX 12765 6036 512 512
ReadX 12765 6548 512 512
ReadX 12765 7060 512 512
ReadX 12765 7572 512 512
ReadX 12765 8084 512 512
ReadX 12765 8596 512 512
ReadX 12765 9108 512 512
ReadX 12765 9620 512 512
ReadX 12765 10132 512 512
ReadX 12765 10644 512 512
ReadX 12765 11156 512 512
ReadX 12765 11668 512 512
ReadX 12765 12180 512 512
ReadX 12765 12692 512 512
ReadX 12765 13204 512 512
ReadX 12765 3430 512 512
ReadX 12765 3942 512 512
ReadX 12765 3434 512 512
ReadX 12765 3435 512 512
ReadX 12765 3947 512 512
ReadX 12765 4459 512 512
ReadX 12765 4971 512 512
ReadX 12765 5483 512 512
ReadX 12765 5995 512 512
ReadX 12765 6507 512 512
ReadX 12765 7019 512 512
ReadX 12765 7531 512 512
ReadX 12765 8043 512 512
ReadX 12765 8555 512 512
ReadX 12765 9067 512 512
ReadX 12765 9579 512 512
ReadX 12765 10091 512 512
ReadX 12765 10603 512 512
ReadX 12765 11115 512 512
ReadX 12765 3467 512 512
ReadX 12765 3979 512 512
ReadX 12765 4491 512 512
ReadX 12765 5003 512 512
ReadX 12765 5515 512 512
ReadX 12765 6027 512 512
ReadX 12765 6539 512 512
ReadX 12765 7051 512 512
ReadX 12765 7563 512 512
ReadX 12765 8075 512 512
ReadX 12765 8587 512 512
ReadX 12765 9099 512 512
ReadX 12765 9611 512 512
ReadX 12765 10123 512 512
ReadX 12765 10635 512 512
ReadX 12765 11147 512 512
ReadX 12765 11659 512 512
ReadX 12765 12171 512 512
ReadX 12765 12683 512 512
ReadX 12765 13195 512 512
ReadX 12765 13707 56 56
ReadX 12765 13763 512 512
ReadX 12765 14275 456 456
ReadX 12765 14731 512 512
ReadX 12765 15243 512 512
ReadX 12765 15755 512 512
ReadX 12765 16267 512 512
ReadX 12765 16779 512 512
ReadX 12765 17291 512 512
ReadX 12765 17803 512 512
ReadX 12765 18315 512 512
ReadX 12765 18827 512 512
ReadX 12765 19339 512 512
ReadX 12765 19851 512 512
ReadX 12765 20363 512 512
ReadX 12765 20875 512 512
ReadX 12765 21387 512 512
ReadX 12765 21899 512 512
ReadX 12765 22411 512 512
ReadX 12765 22923 512 512
ReadX 12765 23435 512 512
ReadX 12765 23947 512 512
ReadX 12765 24459 512 512
ReadX 12765 24971 282 282
ReadX 12765 3434 512 512
ReadX 12765 2818 512 512
ReadX 12765 2870 512 512
ReadX 12765 3026 512 512
ReadX 12765 3538 512 512
ReadX 12765 2870 512 512
ReadX 12765 3382 512 512
ReadX 12765 3894 512 512
ReadX 12765 4406 512 512
ReadX 12765 4918 512 512
ReadX 12765 5430 512 512
ReadX 12765 5942 512 512
ReadX 12765 6454 374 374
ReadX 12765 2856 138 138
ReadX 12765 2994 512 512
ReadX 12765 3506 512 512
ReadX 12765 4018 512 512
ReadX 12765 4530 512 512
ReadX 12765 5042 512 512
ReadX 12765 5554 512 512
ReadX 12765 6066 374 374
ReadX 12765 2886 138 138
ReadX 12765 3024 512 512
ReadX 12765 3536 512 512
ReadX 12765 4048 512 512
ReadX 12765 4560 512 512
ReadX 12765 5072 512 512
ReadX 12765 5584 512 512
ReadX 12765 6096 512 512
ReadX 12765 6608 512 512
ReadX 12765 7120 512 512
ReadX 12765 7632 512 512
ReadX 12765 8144 512 512
ReadX 12765 8656 512 512
ReadX 12765 9168 512 512
ReadX 12765 9680 512 512
ReadX 12765 10192 512 512
ReadX 12765 10704 512 512
ReadX 12765 11216 512 512
ReadX 12765 11728 512 512
ReadX 12765 12240 512 512
ReadX 12765 12752 512 512
QUERY_FS_INFORMATION 259
ReadX 12765 13264 512 512
ReadX 12765 13776 512 512
ReadX 12765 14288 512 512
ReadX 12765 14800 512 512
ReadX 12765 15312 512 512
ReadX 12765 15824 512 512
ReadX 12765 16336 512 512
ReadX 12765 16848 512 512
ReadX 12765 17360 512 512
ReadX 12765 17872 512 512
ReadX 12765 18384 512 512
ReadX 12765 18896 512 512
ReadX 12765 19408 512 512
ReadX 12765 19920 512 512
ReadX 12765 20432 512 512
ReadX 12765 20944 512 512
ReadX 12765 21456 512 512
ReadX 12765 21968 512 512
ReadX 12765 22480 512 512
ReadX 12765 22992 512 512
ReadX 12765 2998 512 512
ReadX 12765 3510 512 512
ReadX 12765 3001 512 512
ReadX 12765 3003 512 512
ReadX 12765 3515 512 512
ReadX 12765 4027 512 512
ReadX 12765 4539 512 512
ReadX 12765 5051 512 512
ReadX 12765 5563 512 512
ReadX 12765 6075 512 512
ReadX 12765 6587 512 512
ReadX 12765 7099 512 512
ReadX 12765 7611 512 512
ReadX 12765 8123 512 512
ReadX 12765 8635 512 512
ReadX 12765 3029 512 512
ReadX 12765 3541 512 512
ReadX 12765 4053 512 512
ReadX 12765 4565 512 512
ReadX 12765 5077 512 512
ReadX 12765 5589 512 512
ReadX 12765 6101 512 512
ReadX 12765 6613 512 512
ReadX 12765 7125 512 512
ReadX 12765 7637 512 512
ReadX 12765 8149 512 512
ReadX 12765 8661 512 512
ReadX 12765 9173 512 512
ReadX 12765 9685 512 512
ReadX 12765 10197 512 512
ReadX 12765 10709 512 512
ReadX 12765 11221 512 512
ReadX 12765 11733 512 512
ReadX 12765 12245 512 512
ReadX 12765 12757 512 512
ReadX 12765 13269 40 40
ReadX 12765 3076 472 472
ReadX 12765 3548 512 512
ReadX 12765 4060 512 512
ReadX 12765 4572 512 512
ReadX 12765 5084 512 512
ReadX 12765 5596 512 512
ReadX 12765 6108 512 512
ReadX 12765 6620 512 512
ReadX 12765 7132 512 512
ReadX 12765 7644 512 512
ReadX 12765 8156 512 512
ReadX 12765 8668 512 512
ReadX 12765 9180 512 512
ReadX 12765 9692 512 512
ReadX 12765 10204 512 512
ReadX 12765 10716 512 512
ReadX 12765 11228 512 512
ReadX 12765 11740 512 512
ReadX 12765 12252 512 512
ReadX 12765 12764 512 512
ReadX 12765 13276 310 310
ReadX 12765 3001 512 512
ReadX 12765 2562 512 512
ReadX 12765 2626 512 512
ReadX 12765 3003 512 512
ReadX 12765 2721 512 512
ReadX 12765 2626 512 512
ReadX 12765 3138 512 512
ReadX 12765 3650 512 512
ReadX 12765 4162 512 512
ReadX 12765 4674 512 512
ReadX 12765 5186 512 512
ReadX 12765 5698 512 512
ReadX 12765 6210 424 424
ReadX 12765 2612 88 88
ReadX 12765 2700 512 512
ReadX 12765 3212 512 512
ReadX 12765 3724 512 512
ReadX 12765 4236 512 512
ReadX 12765 4748 512 512
ReadX 12765 5260 512 512
ReadX 12765 5772 424 424
ReadX 12765 2642 88 88
ReadX 12765 2730 512 512
ReadX 12765 3242 512 512
ReadX 12765 3754 512 512
ReadX 12765 4266 512 512
ReadX 12765 4778 512 512
ReadX 12765 5290 512 512
ReadX 12765 5802 512 512
ReadX 12765 6314 512 512
ReadX 12765 6826 512 512
ReadX 12765 7338 512 512
ReadX 12765 7850 512 512
ReadX 12765 8362 512 512
ReadX 12765 8874 512 512
ReadX 12765 9386 512 512
ReadX 12765 9898 512 512
ReadX 12765 10410 512 512
ReadX 12765 10922 512 512
ReadX 12765 11434 512 512
ReadX 12765 11946 512 512
ReadX 12765 12458 512 512
ReadX 12765 2716 512 512
ReadX 12765 2717 512 512
ReadX 12765 2718 512 512
ReadX 12765 3230 512 512
ReadX 12765 2721 512 512
ReadX 12765 3233 512 512
ReadX 12765 3745 512 512
ReadX 12765 4257 512 512
ReadX 12765 4769 512 512
ReadX 12765 5281 512 512
ReadX 12765 5793 512 512
ReadX 12765 6305 512 512
ReadX 12765 6817 512 512
ReadX 12765 7329 512 512
ReadX 12765 7841 512 512
ReadX 12765 8353 512 512
ReadX 12765 8865 512 512
ReadX 12765 9377 512 512
ReadX 12765 9889 512 512
ReadX 12765 10401 512 512
ReadX 12765 10913 512 512
ReadX 12765 11425 512 512
ReadX 12765 11937 512 512
ReadX 12765 12449 512 512
ReadX 12765 12961 512 512
ReadX 12765 13473 512 512
ReadX 12765 13985 106 106
ReadX 12765 2820 406 406
ReadX 12765 3226 512 512
ReadX 12765 3738 512 512
ReadX 12765 4250 512 512
ReadX 12765 4762 512 512
ReadX 12765 5274 512 512
ReadX 12765 5786 512 512
ReadX 12765 6298 512 512
ReadX 12765 6810 512 512
ReadX 12765 7322 512 512
ReadX 12765 7834 512 512
ReadX 12765 8346 512 512
ReadX 12765 8858 512 512
ReadX 12765 9370 512 512
ReadX 12765 9882 512 512
ReadX 12765 10394 512 512
ReadX 12765 10906 512 512
ReadX 12765 11418 182 182
ReadX 12765 2717 512 512
ReadX 12765 258 512 512
ReadX 12765 470 512 512
ReadX 12765 376 512 512
ReadX 12765 888 512 512
ReadX 12765 1400 512 512
ReadX 12765 1912 512 512
ReadX 12765 2424 512 512
ReadX 12765 2936 512 512
ReadX 12765 3448 512 512
ReadX 12765 3960 424 424
ReadX 12765 362 88 88
ReadX 12765 450 512 512
ReadX 12765 962 512 512
ReadX 12765 1474 512 512
ReadX 12765 1986 512 512
ReadX 12765 2498 512 512
ReadX 12765 3010 512 512
ReadX 12765 3522 424 424
ReadX 12765 392 88 88
ReadX 12765 480 512 512
ReadX 12765 992 512 512
ReadX 12765 1504 512 512
ReadX 12765 2016 512 512
ReadX 12765 2528 512 512
ReadX 12765 3040 512 512
ReadX 12765 3552 512 512
ReadX 12765 4064 512 512
ReadX 12765 4576 512 512
ReadX 12765 5088 512 512
ReadX 12765 5600 512 512
ReadX 12765 6112 512 512
ReadX 12765 6624 512 512
ReadX 12765 7136 512 512
ReadX 12765 7648 512 512
ReadX 12765 8160 512 512
ReadX 12765 8672 512 512
ReadX 12765 9184 512 512
ReadX 12765 9696 512 512
ReadX 12765 10208 512 512
ReadX 12765 464 512 512
ReadX 12765 465 512 512
ReadX 12765 466 512 512
ReadX 12765 978 512 512
ReadX 12765 470 512 512
ReadX 12765 982 512 512
ReadX 12765 1494 512 512
ReadX 12765 2006 512 512
ReadX 12765 2518 512 512
ReadX 12765 3030 512 512
ReadX 12765 3542 512 512
ReadX 12765 4054 512 512
ReadX 12765 4566 512 512
ReadX 12765 5078 512 512
ReadX 12765 5590 512 512
ReadX 12765 6102 512 512
ReadX 12765 6614 512 512
ReadX 12765 7126 512 512
ReadX 12765 7638 512 512
ReadX 12765 8150 512 512
ReadX 12765 8662 512 512
ReadX 12765 9174 512 512
ReadX 12765 9686 512 512
ReadX 12765 10198 512 512
ReadX 12765 10710 333 333
ReadX 12765 11043 512 512
ReadX 12765 11555 179 179
ReadX 12765 11734 512 512
ReadX 12765 12246 512 512
ReadX 12765 12758 512 512
ReadX 12765 13270 512 512
ReadX 12765 13782 512 512
ReadX 12765 14294 512 512
ReadX 12765 14806 512 512
ReadX 12765 15318 512 512
ReadX 12765 15830 512 512
ReadX 12765 16342 512 512
ReadX 12765 16854 512 512
ReadX 12765 17366 512 512
ReadX 12765 17878 512 512
ReadX 12765 18390 512 512
ReadX 12765 18902 512 512
ReadX 12765 19414 512 512
ReadX 12765 19926 512 512
ReadX 12765 20438 512 512
ReadX 12765 20950 512 512
ReadX 12765 21462 512 512
ReadX 12765 21974 350 350
ReadX 12765 465 512 512
ReadX 12765 3812 512 512
ReadX 12765 4046 512 512
ReadX 12765 3828 512 512
ReadX 12765 256 512 512
ReadX 12765 260 512 512
ReadX 12765 4066 512 512
ReadX 12765 4578 512 512
ReadX 12765 5090 512 512
ReadX 12765 5602 512 512
ReadX 12765 6114 512 512
ReadX 12765 6626 512 512
ReadX 12765 7138 512 512
ReadX 12765 7650 394 394
ReadX 12765 4052 118 118
ReadX 12765 4170 512 512
ReadX 12765 4682 512 512
ReadX 12765 5194 512 512
ReadX 12765 5706 512 512
ReadX 12765 6218 512 512
ReadX 12765 6730 512 512
ReadX 12765 7242 394 394
ReadX 12765 4082 118 118
ReadX 12765 4200 512 512
ReadX 12765 4712 512 512
ReadX 12765 5224 512 512
ReadX 12765 5736 512 512
ReadX 12765 6248 512 512
ReadX 12765 6760 512 512
ReadX 12765 7272 512 512
ReadX 12765 7784 394 394
ReadX 12765 256 118 118
ReadX 12765 374 512 512
ReadX 12765 886 512 512
ReadX 12765 1398 512 512
ReadX 12765 1910 512 512
ReadX 12765 2422 512 512
ReadX 12765 2934 512 512
ReadX 12765 3446 512 512
ReadX 12765 3958 512 512
ReadX 12765 4470 512 512
ReadX 12765 4982 512 512
ReadX 12765 5494 512 512
ReadX 12765 6006 512 512
ReadX 12765 6518 512 512
ReadX 12765 7030 512 512
ReadX 12765 7542 512 512
ReadX 12765 8054 512 512
ReadX 12765 8566 512 512
ReadX 12765 9078 512 512
ReadX 12765 9590 512 512
ReadX 12765 10102 512 512
ReadX 12765 259 512 512
ReadX 12765 771 512 512
ReadX 12765 259 512 512
ReadX 12765 259 512 512
ReadX 12765 771 512 512
ReadX 12765 1283 512 512
ReadX 12765 1795 512 512
ReadX 12765 2307 512 512
ReadX 12765 2819 512 512
ReadX 12765 3331 512 512
ReadX 12765 3843 512 512
ReadX 12765 4355 512 512
ReadX 12765 4867 512 512
ReadX 12765 260 512 512
ReadX 12765 772 512 512
ReadX 12765 1284 512 512
ReadX 12765 1796 512 512
ReadX 12765 2308 512 512
ReadX 12765 2820 512 512
ReadX 12765 3332 512 512
ReadX 12765 3844 512 512
ReadX 12765 4356 512 512
ReadX 12765 4868 512 512
ReadX 12765 5380 512 512
ReadX 12765 5892 512 512
ReadX 12765 6404 512 512
ReadX 12765 6916 512 512
ReadX 12765 7428 512 512
ReadX 12765 7940 512 512
ReadX 12765 8452 512 512
ReadX 12765 8964 512 512
ReadX 12765 9476 512 512
ReadX 12765 9988 512 512
ReadX 12765 10500 378 378
ReadX 12765 10878 512 512
ReadX 12765 11390 134 134
ReadX 12765 11524 512 512
ReadX 12765 12036 512 512
ReadX 12765 12548 512 512
ReadX 12765 13060 512 512
ReadX 12765 13572 138 138
ReadX 12765 259 512 512
ReadX 12765 273 512 512
ReadX 12765 276 512 512
ReadX 12765 295 512 512
ReadX 12765 288 512 512
ReadX 12765 296 512 512
ReadX 12765 259 512 512
ReadX 12765 273 512 512
ReadX 12765 273 512 512
ReadX 12765 785 512 512
ReadX 12765 1297 512 512
ReadX 12765 1809 512 512
ReadX 12765 2321 512 512
ReadX 12765 274 512 512
ReadX 12765 274 512 512
ReadX 12765 274 497 497
ReadX 12765 272 15 15
ReadX 12765 287 512 512
ReadX 12765 799 512 512
ReadX 12765 273 512 512
ReadX 12765 785 512 512
ReadX 12765 1297 512 512
ReadX 12765 1809 512 512
ReadX 12765 2321 512 512
ReadX 12765 2833 317 317
ReadX 12765 274 195 195
ReadX 12765 469 512 512
ReadX 12765 981 512 512
ReadX 12765 1493 512 512
ReadX 12765 2005 512 512
ReadX 12765 2517 512 512
ReadX 12765 3029 512 512
ReadX 12765 3541 512 512
ReadX 12765 4053 512 512
ReadX 12765 4565 250 250
ReadX 12765 274 512 512
ReadX 12765 283 512 512
ReadX 12765 795 512 512
ReadX 12765 276 512 512
ReadX 12765 788 512 512
ReadX 12765 1300 512 512
ReadX 12765 1812 512 512
ReadX 12765 2324 512 512
ReadX 12765 2836 512 512
ReadX 12765 3348 512 512
ReadX 12765 3860 420 420
ReadX 12765 275 92 92
ReadX 12765 367 512 512
ReadX 12765 879 512 512
ReadX 12765 1391 512 512
ReadX 12765 1903 512 512
ReadX 12765 2415 512 512
ReadX 12765 2927 512 512
ReadX 12765 3439 420 420
ReadX 12765 277 92 92
ReadX 12765 369 512 512
ReadX 12765 881 512 512
ReadX 12765 1393 512 512
ReadX 12765 1905 512 512
ReadX 12765 2417 512 512
ReadX 12765 2929 512 512
ReadX 12765 3441 512 512
ReadX 12765 3953 512 512
ReadX 12765 4465 512 512
ReadX 12765 4977 512 512
ReadX 12765 5489 512 512
ReadX 12765 6001 512 512
ReadX 12765 6513 512 512
ReadX 12765 7025 512 512
ReadX 12765 7537 512 512
ReadX 12765 8049 512 512
ReadX 12765 8561 512 512
ReadX 12765 9073 512 512
ReadX 12765 9585 512 512
ReadX 12765 10097 512 512
ReadX 12765 282 512 512
ReadX 12765 794 512 512
ReadX 12765 1306 512 512
ReadX 12765 1818 512 512
ReadX 12765 2330 512 512
ReadX 12765 2842 512 512
ReadX 12765 3354 512 512
ReadX 12765 3866 512 512
ReadX 12765 4378 512 512
ReadX 12765 284 512 512
ReadX 12765 796 512 512
ReadX 12765 1308 512 512
ReadX 12765 1820 512 512
ReadX 12765 2332 512 512
ReadX 12765 2844 512 512
ReadX 12765 3356 512 512
ReadX 12765 3868 512 512
ReadX 12765 4380 512 512
ReadX 12765 4892 512 512
ReadX 12765 5404 512 512
ReadX 12765 5916 512 512
ReadX 12765 6428 512 512
ReadX 12765 6940 512 512
ReadX 12765 7452 512 512
ReadX 12765 7964 512 512
ReadX 12765 8476 512 512
ReadX 12765 8988 512 512
ReadX 12765 9500 512 512
ReadX 12765 10012 512 512
ReadX 12765 10524 472 472
ReadX 12765 288 40 40
ReadX 12765 328 512 512
ReadX 12765 840 512 512
ReadX 12765 1352 512 512
ReadX 12765 1864 512 512
ReadX 12765 2376 512 512
ReadX 12765 2888 512 512
ReadX 12765 3400 512 512
ReadX 12765 3912 512 512
ReadX 12765 4424 512 512
ReadX 12765 4936 512 512
ReadX 12765 5448 512 512
ReadX 12765 5960 512 512
ReadX 12765 6472 512 512
ReadX 12765 6984 512 512
ReadX 12765 7496 512 512
ReadX 12765 8008 512 512
ReadX 12765 8520 512 512
ReadX 12765 9032 512 512
ReadX 12765 9544 512 512
ReadX 12765 10056 512 512
ReadX 12765 10568 506 506
ReadX 12765 282 512 512
ReadX 12765 794 512 512
ReadX 12765 301 512 512
ReadX 12765 296 512 512
ReadX 12765 808 512 512
ReadX 12765 1320 512 512
ReadX 12765 1832 512 512
ReadX 12765 2344 512 512
ReadX 12765 2856 512 512
ReadX 12765 3368 512 512
ReadX 12765 3880 424 424
ReadX 12765 295 88 88
ReadX 12765 383 512 512
ReadX 12765 895 512 512
ReadX 12765 1407 512 512
ReadX 12765 1919 512 512
ReadX 12765 2431 512 512
ReadX 12765 2943 512 512
ReadX 12765 3455 424 424
ReadX 12765 297 88 88
ReadX 12765 385 512 512
ReadX 12765 897 512 512
ReadX 12765 1409 512 512
ReadX 12765 1921 512 512
ReadX 12765 2433 512 512
ReadX 12765 2945 512 512
ReadX 12765 3457 512 512
ReadX 12765 3969 512 512
ReadX 12765 4481 512 512
ReadX 12765 4993 512 512
ReadX 12765 5505 512 512
ReadX 12765 6017 512 512
ReadX 12765 6529 512 512
ReadX 12765 7041 512 512
ReadX 12765 7553 512 512
ReadX 12765 8065 512 512
ReadX 12765 8577 512 512
ReadX 12765 9089 512 512
ReadX 12765 9601 512 512
ReadX 12765 10113 512 512
ReadX 12765 301 512 512
ReadX 12765 301 512 512
ReadX 12765 301 512 512
ReadX 12765 813 512 512
ReadX 12765 301 512 512
ReadX 12765 813 512 512
ReadX 12765 1325 512 512
ReadX 12765 1837 512 512
ReadX 12765 2349 512 512
ReadX 12765 2861 512 512
ReadX 12765 3373 512 512
ReadX 12765 3885 512 512
ReadX 12765 4397 512 512
ReadX 12765 4909 512 512
ReadX 12765 5421 512 512
ReadX 12765 5933 512 512
ReadX 12765 6445 512 512
ReadX 12765 6957 512 512
ReadX 12765 7469 512 512
ReadX 12765 7981 512 512
ReadX 12765 8493 512 512
ReadX 12765 9005 512 512
ReadX 12765 9517 463 463
ReadX 12765 9980 512 512
ReadX 12765 10492 49 49
ReadX 12765 10541 512 512
ReadX 12765 11053 512 512
ReadX 12765 11565 512 512
ReadX 12765 12077 512 512
ReadX 12765 12589 512 512
ReadX 12765 13101 512 512
ReadX 12765 13613 512 512
ReadX 12765 14125 512 512
ReadX 12765 14637 512 512
ReadX 12765 15149 512 512
ReadX 12765 15661 512 512
ReadX 12765 16173 512 512
ReadX 12765 16685 512 512
ReadX 12765 17197 512 512
ReadX 12765 17709 512 512
ReadX 12765 18221 512 512
ReadX 12765 18733 512 512
ReadX 12765 19245 512 512
ReadX 12765 19757 512 512
ReadX 12765 20269 512 512
ReadX 12765 20781 326 326
ReadX 12765 301 512 512
QUERY_FS_INFORMATION 259
Close 12763
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12766
Close 12766
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12767
ReadX 12767 0 24 24
Close 12767
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12768
QUERY_FILE_INFORMATION 12768
ReadX 12768 0 512 512
ReadX 12768 476 512 512
ReadX 12768 510 512 512
ReadX 12768 484 512 512
ReadX 12768 474 512 512
ReadX 12768 478 512 512
ReadX 12768 990 512 512
ReadX 12768 509 57 57
Close 12768
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12769
QUERY_FILE_INFORMATION 12769
ReadX 12769 0 512 512
ReadX 12769 476 512 512
ReadX 12769 510 512 512
ReadX 12769 484 512 512
ReadX 12769 480 512 512
ReadX 12769 474 512 512
ReadX 12769 478 512 512
QUERY_FILE_INFORMATION 12769
WriteX 12769 494 60 60
WriteX 12769 494 4 4
QUERY_FILE_INFORMATION 12769
WriteX 12769 494 11 11
WriteX 12769 510 512 512
WriteX 12769 484 512 512
WriteX 12769 474 512 512
WriteX 12769 478 512 512
WriteX 12769 990 512 512
Close 12769
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP 0x40 0x2 12770
Close 12770
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x200000 0x1 12771
Close 12771
Rename \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 12773
WriteX 12773 4607 1 1
QUERY_FILE_INFORMATION 12773
WriteX 12773 0 65471 65471
WriteX 12773 65471 65 65
WriteX 12773 65536 19490 19490
Close 12773
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12774
QUERY_FILE_INFORMATION 12774
ReadX 12774 0 512 512
ReadX 12774 482 512 512
ReadX 12774 994 512 512
ReadX 12774 1506 512 512
ReadX 12774 480 512 512
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
WriteX 12774 490 448 448
QUERY_FILE_INFORMATION 12774
WriteX 12774 490 60 60
WriteX 12774 490 4 4
QUERY_FILE_INFORMATION 12774
WriteX 12774 490 11 11
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
WriteX 12774 484 512 512
WriteX 12774 996 512 512
WriteX 12774 1508 512 512
WriteX 12774 482 512 512
WriteX 12774 0 512 512
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
ReadX 12774 490 512 512
WriteX 12774 502 512 512
WriteX 12774 502 292 292
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
WriteX 12774 503 20 20
WriteX 12774 503 108 108
QUERY_FILE_INFORMATION 12774
WriteX 12774 504 448 448
QUERY_FILE_INFORMATION 12774
WriteX 12774 504 44 44
WriteX 12774 504 20 20
WriteX 12774 500 512 512
WriteX 12774 492 512 512
WriteX 12774 496 512 512
WriteX 12774 1008 512 512
WriteX 12774 494 512 512
Flush 12774
WriteX 12774 0 512 512
Flush 12774
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
WriteX 12774 500 512 512
WriteX 12774 492 512 512
WriteX 12774 496 512 512
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
WriteX 12774 518 320 320
QUERY_FILE_INFORMATION 12774
WriteX 12774 518 60 60
ReadX 12774 504 512 512
WriteX 12774 522 512 512
WriteX 12774 506 3204 3204
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
WriteX 12774 519 25 25
WriteX 12774 518 103 103
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
WriteX 12774 519 44 44
WriteX 12774 519 20 20
WriteX 12774 520 512 512
WriteX 12774 482 512 512
WriteX 12774 486 512 512
WriteX 12774 998 512 512
WriteX 12774 484 512 512
WriteX 12774 490 512 512
Flush 12774
WriteX 12774 0 512 512
Flush 12774
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
QUERY_FILE_INFORMATION 12774
WriteX 12774 519 7 7
WriteX 12774 519 57 57
WriteX 12774 520 512 512
WriteX 12774 492 512 512
WriteX 12774 482 512 512
WriteX 12774 486 512 512
WriteX 12774 998 512 512
Flush 12774
WriteX 12774 520 512 512
Flush 12774
Close 12774
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12775
Close 12775
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12776
QUERY_FILE_INFORMATION 12776
ReadX 12776 0 512 512
ReadX 12776 490 512 512
ReadX 12776 484 512 512
ReadX 12776 520 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP 0x40 0x1 12777
Close 12777
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 12776
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TIPS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TIPS.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12778
Close 12778
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12779
ReadX 12779 0 24 24
Close 12779
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12780
QUERY_FILE_INFORMATION 12780
ReadX 12780 0 512 512
ReadX 12780 366 512 512
ReadX 12780 878 512 512
ReadX 12780 1390 512 512
ReadX 12780 1902 512 512
ReadX 12780 374 57 57
Close 12780
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12781
QUERY_FILE_INFORMATION 12781
ReadX 12781 0 512 512
ReadX 12781 366 512 512
ReadX 12781 878 512 512
ReadX 12781 1390 512 512
ReadX 12781 1902 512 512
QUERY_FILE_INFORMATION 12781
WriteX 12781 374 60 60
WriteX 12781 374 4 4
QUERY_FILE_INFORMATION 12781
WriteX 12781 374 11 11
ReadX 12781 374 57 57
ReadX 12781 374 57 57
ReadX 12781 292 4096 4096
ReadX 12781 364 512 512
ReadX 12781 512 4096 4096
ReadX 12781 4608 4096 4096
ReadX 12781 8704 4096 4096
ReadX 12781 12800 4096 4096
ReadX 12781 16896 4096 4096
ReadX 12781 20992 4096 4096
ReadX 12781 25088 4096 4096
ReadX 12781 29184 4096 4096
ReadX 12781 33280 4096 4096
ReadX 12781 37376 4096 4096
ReadX 12781 41472 4096 4096
ReadX 12781 45568 4096 4096
ReadX 12781 49664 4096 4096
ReadX 12781 53760 4096 4096
ReadX 12781 57856 4096 4096
ReadX 12781 61952 4096 4096
ReadX 12781 66048 4096 4096
ReadX 12781 70144 4096 4096
ReadX 12781 74240 162 162
ReadX 12781 308 4096 4096
ReadX 12781 4404 4096 4096
WriteX 12781 368 512 512
WriteX 12781 880 512 512
WriteX 12781 1392 512 512
Close 12781
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12782
Close 12782
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12783
QUERY_FILE_INFORMATION 12783
ReadX 12783 0 512 512
ReadX 12783 366 512 512
ReadX 12783 878 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 12784
Close 12784
Unlink \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 12783
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 12786
WriteX 12786 4607 1 1
QUERY_FILE_INFORMATION 12786
WriteX 12786 0 65471 65471
WriteX 12786 65471 65 65
WriteX 12786 65536 8866 8866
Close 12786
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12787
QUERY_FILE_INFORMATION 12787
ReadX 12787 0 512 512
ReadX 12787 366 512 512
ReadX 12787 878 512 512
ReadX 12787 1390 512 512
ReadX 12787 364 512 512
QUERY_FILE_INFORMATION 12787
QUERY_FILE_INFORMATION 12787
QUERY_FILE_INFORMATION 12787
WriteX 12787 374 448 448
QUERY_FILE_INFORMATION 12787
WriteX 12787 374 60 60
WriteX 12787 374 4 4
QUERY_FILE_INFORMATION 12787
WriteX 12787 374 11 11
QUERY_FILE_INFORMATION 12787
QUERY_FILE_INFORMATION 12787
WriteX 12787 374 7 7
WriteX 12787 374 57 57
WriteX 12787 368 512 512
WriteX 12787 880 512 512
WriteX 12787 1392 512 512
WriteX 12787 366 512 512
WriteX 12787 0 512 512
Flush 12787
WriteX 12787 368 512 512
Flush 12787
Close 12787
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12788
QUERY_FILE_INFORMATION 12788
ReadX 12788 0 512 512
ReadX 12788 366 512 512
ReadX 12788 878 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 12788
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12789
Close 12789
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12790
ReadX 12790 0 24 24
Close 12790
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12791
QUERY_FILE_INFORMATION 12791
ReadX 12791 0 512 512
ReadX 12791 366 512 512
ReadX 12791 878 512 512
ReadX 12791 1390 512 512
ReadX 12791 1902 512 512
ReadX 12791 374 57 57
Close 12791
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12792
QUERY_FILE_INFORMATION 12792
ReadX 12792 0 512 512
ReadX 12792 366 512 512
ReadX 12792 878 512 512
ReadX 12792 1390 512 512
ReadX 12792 1902 512 512
QUERY_FILE_INFORMATION 12792
WriteX 12792 374 60 60
WriteX 12792 374 4 4
QUERY_FILE_INFORMATION 12792
WriteX 12792 374 11 11
WriteX 12792 368 512 512
WriteX 12792 880 512 512
WriteX 12792 1392 512 512
Close 12792
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP 0x40 0x2 12793
Close 12793
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x200000 0x1 12794
Close 12794
Rename \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 12796
WriteX 12796 4607 1 1
QUERY_FILE_INFORMATION 12796
WriteX 12796 0 65471 65471
WriteX 12796 65471 65 65
WriteX 12796 65536 9298 9298
Close 12796
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12797
QUERY_FILE_INFORMATION 12797
ReadX 12797 0 512 512
ReadX 12797 368 512 512
ReadX 12797 880 512 512
ReadX 12797 1392 512 512
ReadX 12797 366 512 512
QUERY_FILE_INFORMATION 12797
QUERY_FILE_INFORMATION 12797
QUERY_FILE_INFORMATION 12797
WriteX 12797 376 448 448
QUERY_FILE_INFORMATION 12797
WriteX 12797 376 60 60
WriteX 12797 376 4 4
QUERY_FILE_INFORMATION 12797
WriteX 12797 376 11 11
QUERY_FILE_INFORMATION 12797
QUERY_FILE_INFORMATION 12797
WriteX 12797 376 7 7
WriteX 12797 376 57 57
WriteX 12797 370 512 512
WriteX 12797 882 512 512
WriteX 12797 1394 512 512
WriteX 12797 368 512 512
WriteX 12797 0 512 512
Flush 12797
WriteX 12797 370 512 512
Flush 12797
Close 12797
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12798
Close 12798
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12799
QUERY_FILE_INFORMATION 12799
ReadX 12799 0 512 512
ReadX 12799 368 512 512
ReadX 12799 880 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP 0x40 0x1 12800
Close 12800
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\Designs 1
NTCreateX \clients\client1\~dmtmp\Designs 0x40 0x1 -1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TRIDOTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT 1
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 12802
Close 12802
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 12803
ReadX 12803 0 24 24
Close 12803
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 12804
QUERY_FILE_INFORMATION 12804
ReadX 12804 0 512 512
ReadX 12804 512 512 512
ReadX 12804 1024 512 512
ReadX 12804 2016 512 512
ReadX 12804 1056 512 512
ReadX 12804 1096 57 57
Close 12804
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 12805
QUERY_FILE_INFORMATION 12805
ReadX 12805 0 512 512
ReadX 12805 512 512 512
ReadX 12805 1024 512 512
ReadX 12805 2016 512 512
ReadX 12805 1056 512 512
ReadX 12805 1096 57 57
ReadX 12805 1096 57 57
ReadX 12805 1088 62 62
ReadX 12805 1536 4096 4096
ReadX 12805 5632 4096 4096
ReadX 12805 9728 4096 4096
ReadX 12805 13824 2859 2859
ReadX 12805 1120 28 28
ReadX 12805 1148 20 20
ReadX 12805 1168 8 8
ReadX 12805 1176 88 88
ReadX 12805 1264 8 8
ReadX 12805 1272 4 4
ReadX 12805 1276 4 4
ReadX 12805 1280 1 1
ReadX 12805 1130 4 4
ReadX 12805 1134 4 4
ReadX 12805 1138 1 1
ReadX 12805 1131 4 4
ReadX 12805 1135 4 4
ReadX 12805 1139 1 1
ReadX 12805 1131 4 4
ReadX 12805 1135 4 4
ReadX 12805 1139 2 2
ReadX 12805 1132 4 4
ReadX 12805 1136 4 4
ReadX 12805 1140 25 25
ReadX 12805 1134 4 4
ReadX 12805 1138 8 8
ReadX 12805 1146 4 4
ReadX 12805 1150 8 8
ReadX 12805 1158 4 4
ReadX 12805 1162 8 8
ReadX 12805 1170 4 4
ReadX 12805 1174 4 4
ReadX 12805 1178 4 4
ReadX 12805 1182 4 4
ReadX 12805 1186 4 4
ReadX 12805 1190 4 4
ReadX 12805 1194 13900 13900
ReadX 12805 2048 4096 4096
Close 12805
QUERY_FS_INFORMATION 259
Close 12799
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12806
Close 12806
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12807
ReadX 12807 0 24 24
Close 12807
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12808
QUERY_FILE_INFORMATION 12808
ReadX 12808 0 512 512
ReadX 12808 368 512 512
ReadX 12808 880 512 512
ReadX 12808 1392 512 512
ReadX 12808 1904 512 512
ReadX 12808 376 57 57
Close 12808
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12809
QUERY_FILE_INFORMATION 12809
ReadX 12809 0 512 512
ReadX 12809 368 512 512
ReadX 12809 880 512 512
ReadX 12809 1392 512 512
ReadX 12809 1904 512 512
QUERY_FILE_INFORMATION 12809
WriteX 12809 376 60 60
WriteX 12809 376 4 4
QUERY_FILE_INFORMATION 12809
WriteX 12809 376 11 11
WriteX 12809 370 512 512
WriteX 12809 882 512 512
WriteX 12809 1394 512 512
Close 12809
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP 0x40 0x2 12810
Close 12810
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x200000 0x1 12811
Close 12811
Rename \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 12813
WriteX 12813 4607 1 1
QUERY_FILE_INFORMATION 12813
WriteX 12813 0 65471 65471
WriteX 12813 65471 65 65
WriteX 12813 65536 11540 11540
Close 12813
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12814
QUERY_FILE_INFORMATION 12814
ReadX 12814 0 512 512
ReadX 12814 398 512 512
ReadX 12814 910 512 512
ReadX 12814 1422 512 512
ReadX 12814 396 512 512
QUERY_FILE_INFORMATION 12814
QUERY_FILE_INFORMATION 12814
QUERY_FILE_INFORMATION 12814
WriteX 12814 406 448 448
QUERY_FILE_INFORMATION 12814
WriteX 12814 406 60 60
WriteX 12814 406 4 4
QUERY_FILE_INFORMATION 12814
WriteX 12814 406 11 11
QUERY_FILE_INFORMATION 12814
QUERY_FILE_INFORMATION 12814
WriteX 12814 406 7 7
WriteX 12814 406 57 57
WriteX 12814 400 512 512
WriteX 12814 912 512 512
WriteX 12814 1424 512 512
WriteX 12814 398 512 512
WriteX 12814 0 512 512
Flush 12814
WriteX 12814 400 512 512
Flush 12814
Close 12814
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12815
Close 12815
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12816
QUERY_FILE_INFORMATION 12816
ReadX 12816 0 512 512
ReadX 12816 398 512 512
ReadX 12816 910 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP 0x40 0x1 12817
Close 12817
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 12816
ReadX 12765 1434 512 512
Close 12765
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 12818
WriteX 12818 0 65471 65471
WriteX 12818 65471 63 63
WriteX 12818 65534 65471 65471
WriteX 12818 131005 63 63
Close 12818
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 12819
WriteX 12819 0 65471 65471
WriteX 12819 65471 63 63
WriteX 12819 65534 65471 65471
WriteX 12819 131005 63 63
WriteX 12819 131068 65471 65471
WriteX 12819 196539 63 63
WriteX 12819 196602 65471 65471
WriteX 12819 262073 63 63
Close 12819
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 12820
WriteX 12820 0 65471 65471
WriteX 12820 65471 63 63
WriteX 12820 65534 65471 65471
WriteX 12820 131005 63 63
WriteX 12820 131068 65471 65471
WriteX 12820 196539 63 63
WriteX 12820 196602 65471 65471
WriteX 12820 262073 63 63
WriteX 12820 262136 65471 65471
WriteX 12820 327607 63 63
WriteX 12820 327670 65471 65471
WriteX 12820 393141 63 63
WriteX 12820 393204 65471 65471
WriteX 12820 458675 63 63
WriteX 12820 458738 65471 65471
WriteX 12820 524209 63 63
Close 12820
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 12821
Close 12821
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CDRROLS.CFG
NTCreateX \clients\client1\~dmtmp\COREL\CDRROLS.CFG 0x40 0x1 12822
ReadX 12822 0 512 512
ReadX 12822 512 511 511
ReadX 12822 1023 512 512
ReadX 12822 1535 512 512
Close 12822
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CDRBARS.CFG
NTCreateX \clients\client1\~dmtmp\COREL\CDRBARS.CFG 0x40 0x1 12823
ReadX 12823 0 512 512
ReadX 12823 512 510 510
ReadX 12823 1022 512 512
ReadX 12823 1534 510 510
ReadX 12823 2044 510 510
Close 12823
NTCreateX \clients\client1\~dmtmp\COREL\ARTISTIC.ACL 0x40 0x1 12824
ReadX 12824 0 512 512
ReadX 12824 512 512 512
ReadX 12824 1024 512 512
ReadX 12824 1536 512 512
ReadX 12824 2048 512 512
ReadX 12824 2560 512 512
ReadX 12824 3072 512 512
ReadX 12824 3584 512 512
ReadX 12824 4096 512 512
ReadX 12824 4608 512 512
ReadX 12824 5120 512 512
ReadX 12824 5632 512 512
ReadX 12824 6144 512 512
ReadX 12824 6656 512 512
ReadX 12824 7168 512 512
ReadX 12824 7680 512 512
ReadX 12824 8192 512 512
ReadX 12824 8704 512 512
Close 12824
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CDRMENU.CFG 1
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 12825
Close 12825
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CORELDRW.CDT
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 12826
QUERY_FILE_INFORMATION 12826
Close 12826
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 12827
ReadX 12827 0 8192 8192
Close 12827
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 12828
Close 12828
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 12829
QUERY_FILE_INFORMATION 12829
Close 12829
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 12830
ReadX 12830 0 8192 8192
Close 12830
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 12831
Close 12831
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 12832
QUERY_FILE_INFORMATION 12832
Close 12832
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 12833
ReadX 12833 0 8192 8192
Close 12833
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 12834
ReadX 12834 0 8192 8192
ReadX 12834 8192 8192 8192
ReadX 12834 16384 8192 8192
ReadX 12834 24576 8192 8192
Close 12834
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x2 12836
Close 12836
Unlink \clients\client1\~dmtmp\COREL\GRAPH1.CDR
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x2 12838
WriteX 12838 8191 1 1
QUERY_FILE_INFORMATION 12838
WriteX 12838 0 10438 10438
Close 12838
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\MAILBOX2.CPT
NTCreateX \clients\client1\~dmtmp\COREL\MAILBOX2.CPT 0x40 0x1 12839
Close 12839
NTCreateX \clients\client1\~dmtmp\COREL\MAILBOX2.CPT 0x40 0x1 12840
QUERY_FILE_INFORMATION 12840
QUERY_FILE_INFORMATION 12840
Close 12840
NTCreateX \clients\client1\~dmtmp\COREL\MAILBOX2.CPT 0x40 0x1 12841
QUERY_FILE_INFORMATION 12841
QUERY_FILE_INFORMATION 12841
Close 12841
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\TEAPOT2.CPT
NTCreateX \clients\client1\~dmtmp\COREL\TEAPOT2.CPT 0x40 0x1 12842
Close 12842
NTCreateX \clients\client1\~dmtmp\COREL\TEAPOT2.CPT 0x40 0x1 12843
QUERY_FILE_INFORMATION 12843
QUERY_FILE_INFORMATION 12843
Close 12843
NTCreateX \clients\client1\~dmtmp\COREL\TEAPOT2.CPT 0x40 0x1 12844
QUERY_FILE_INFORMATION 12844
QUERY_FILE_INFORMATION 12844
Close 12844
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\SIGN2.CPT
NTCreateX \clients\client1\~dmtmp\COREL\SIGN2.CPT 0x40 0x1 12845
Close 12845
NTCreateX \clients\client1\~dmtmp\COREL\SIGN2.CPT 0x40 0x1 12846
QUERY_FILE_INFORMATION 12846
QUERY_FILE_INFORMATION 12846
Close 12846
NTCreateX \clients\client1\~dmtmp\COREL\SIGN2.CPT 0x40 0x1 12847
QUERY_FILE_INFORMATION 12847
QUERY_FILE_INFORMATION 12847
Close 12847
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\TRAIN.CDR
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 12848
Close 12848
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 12849
QUERY_FILE_INFORMATION 12849
QUERY_FILE_INFORMATION 12849
Close 12849
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 12850
ReadX 12850 0 8 8
ReadX 12850 8 4 4
ReadX 12850 12 8 8
ReadX 12850 22 8 8
ReadX 12850 520 8 8
ReadX 12850 525 8 8
ReadX 12850 533 4 4
ReadX 12850 543 8 8
ReadX 12850 551 4 4
ReadX 12850 1058 8 8
ReadX 12850 1066 4 4
ReadX 12850 1081 8 8
ReadX 12850 1089 4 4
ReadX 12850 660 8 8
Close 12850
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 12851
ReadX 12851 0 8192 8192
Close 12851
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 12852
ReadX 12852 0 8192 8192
ReadX 12852 520 8192 8192
ReadX 12852 8712 8192 8192
ReadX 12852 16904 8192 8192
ReadX 12852 25096 8192 8192
ReadX 12852 33288 8192 8192
ReadX 12852 41480 8192 8192
ReadX 12852 49672 8192 8192
ReadX 12852 57864 8192 8192
ReadX 12852 66056 8192 8192
ReadX 12852 74248 8192 8192
ReadX 12852 82440 8192 8192
ReadX 12852 90632 8192 8192
ReadX 12852 98824 8192 8192
ReadX 12852 107016 8192 8192
ReadX 12852 115208 8192 8192
ReadX 12852 123400 8192 8192
ReadX 12852 131592 8192 8192
ReadX 12852 139784 8192 8192
ReadX 12852 147976 8192 8192
ReadX 12852 156168 8192 8192
Close 12852
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 12853
QUERY_FILE_INFORMATION 12853
Close 12853
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x200000 0x1 12854
Close 12854
Rename \clients\client1\~dmtmp\COREL\GRAPH1.CDR \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x2 12856
WriteX 12856 8191 1 1
QUERY_FILE_INFORMATION 12856
WriteX 12856 0 28489 28489
Close 12856
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.BAK 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x200000 0x1 12857
Close 12857
Rename \clients\client1\~dmtmp\COREL\@@@CDRW.TMP \clients\client1\~dmtmp\COREL\GRAPH1.BAK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 12858
Close 12858
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 12859
QUERY_FILE_INFORMATION 12859
Close 12859
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 12860
ReadX 12860 0 8192 8192
Close 12860
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 12861
Close 12861
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 12862
QUERY_FILE_INFORMATION 12862
Close 12862
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 12863
ReadX 12863 0 8192 8192
Close 12863
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 12864
ReadX 12864 0 8192 8192
ReadX 12864 8192 8192 8192
ReadX 12864 16384 8192 8192
ReadX 12864 24576 8192 8192
ReadX 12864 32768 16384 16384
ReadX 12864 49152 8192 8192
ReadX 12864 57344 8192 8192
ReadX 12864 65536 8192 8192
Close 12864
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x2 12866
Close 12866
Unlink \clients\client1\~dmtmp\COREL\GRAPH2.CDR
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x2 12868
WriteX 12868 8191 1 1
QUERY_FILE_INFORMATION 12868
WriteX 12868 0 29253 29253
Close 12868
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\ROSE.CPT
NTCreateX \clients\client1\~dmtmp\COREL\ROSE.CPT 0x40 0x1 12869
Close 12869
NTCreateX \clients\client1\~dmtmp\COREL\ROSE.CPT 0x40 0x1 12870
QUERY_FILE_INFORMATION 12870
QUERY_FILE_INFORMATION 12870
Close 12870
NTCreateX \clients\client1\~dmtmp\COREL\ROSE.CPT 0x40 0x1 12871
QUERY_FILE_INFORMATION 12871
QUERY_FILE_INFORMATION 12871
Close 12871
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 12872
QUERY_FILE_INFORMATION 12872
Close 12872
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x200000 0x1 12873
Close 12873
Rename \clients\client1\~dmtmp\COREL\GRAPH2.CDR \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x2 12875
WriteX 12875 8191 1 1
QUERY_FILE_INFORMATION 12875
WriteX 12875 0 30183 30183
Close 12875
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.BAK 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x200000 0x1 12876
Close 12876
Rename \clients\client1\~dmtmp\COREL\@@@CDRW.TMP \clients\client1\~dmtmp\COREL\GRAPH2.BAK
NTCreateX \clients\client1\~dmtmp\COREL\CDRBARS.CFG 0x40 0x1 12877
WriteX 12877 0 510 510
WriteX 12877 510 512 512
WriteX 12877 1022 510 510
WriteX 12877 1532 510 510
WriteX 12877 2042 168 168
Close 12877
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 12878
Close 12878
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\CDRROLS.CFG 0x40 0x1 12879
WriteX 12879 0 511 511
WriteX 12879 511 512 512
WriteX 12879 1023 512 512
WriteX 12879 1535 488 488
Close 12879
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 12880
ReadX 12880 0 65471 65471
ReadX 12880 65471 63 63
ReadX 12880 65534 65471 65471
ReadX 12880 131005 63 63
ReadX 12880 131068 65471 65471
ReadX 12880 196539 63 63
ReadX 12880 196602 65471 65471
ReadX 12880 262073 63 63
ReadX 12880 262136 65471 65471
ReadX 12880 327607 63 63
ReadX 12880 327670 10 10
Close 12880
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 12881
ReadX 12881 0 65471 65471
ReadX 12881 65471 63 63
ReadX 12881 65534 65471 65471
ReadX 12881 131005 63 63
ReadX 12881 131068 65471 65471
ReadX 12881 196539 63 63
ReadX 12881 196602 65471 65471
ReadX 12881 262073 63 63
ReadX 12881 262136 65471 65471
ReadX 12881 327607 63 63
ReadX 12881 327670 65471 65471
ReadX 12881 393141 63 63
ReadX 12881 393204 65471 65471
ReadX 12881 458675 63 63
ReadX 12881 458738 65471 65471
ReadX 12881 524209 63 63
ReadX 12881 524272 65471 65471
ReadX 12881 589743 63 63
ReadX 12881 589806 65471 65471
ReadX 12881 655277 63 63
ReadX 12881 655340 32 32
Close 12881
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 12882
ReadX 12882 0 65471 65471
ReadX 12882 65471 63 63
ReadX 12882 65534 65471 65471
ReadX 12882 131005 63 63
ReadX 12882 131068 65471 65471
ReadX 12882 196539 63 63
ReadX 12882 196602 65471 65471
ReadX 12882 262073 63 63
ReadX 12882 262136 65471 65471
ReadX 12882 327607 63 63
ReadX 12882 327670 65471 65471
ReadX 12882 393141 63 63
ReadX 12882 393204 65471 65471
ReadX 12882 458675 63 63
ReadX 12882 458738 65471 65471
ReadX 12882 524209 63 63
ReadX 12882 524272 65471 65471
ReadX 12882 589743 63 63
ReadX 12882 589806 65471 65471
ReadX 12882 655277 63 63
ReadX 12882 655340 65471 65471
ReadX 12882 720811 63 63
ReadX 12882 720874 65471 65471
ReadX 12882 786345 63 63
ReadX 12882 786408 65471 65471
ReadX 12882 851879 63 63
ReadX 12882 851942 65471 65471
ReadX 12882 917413 63 63
ReadX 12882 917476 65471 65471
ReadX 12882 982947 63 63
ReadX 12882 983010 65471 65471
ReadX 12882 1048481 63 63
ReadX 12882 1048544 65471 65471
ReadX 12882 1114015 63 63
ReadX 12882 1114078 65471 65471
ReadX 12882 1179549 63 63
ReadX 12882 1179612 65471 65471
ReadX 12882 1245083 63 63
ReadX 12882 1245146 65471 65471
ReadX 12882 1310617 63 63
ReadX 12882 1310680 65471 65471
ReadX 12882 1376151 63 63
ReadX 12882 1376214 65471 65471
ReadX 12882 1441685 63 63
ReadX 12882 1441748 65471 65471
ReadX 12882 1507219 63 63
ReadX 12882 1507282 65471 65471
ReadX 12882 1572753 63 63
ReadX 12882 1572816 65471 65471
ReadX 12882 1638287 63 63
ReadX 12882 1638350 65471 65471
ReadX 12882 1703821 63 63
ReadX 12882 1703884 65471 65471
ReadX 12882 1769355 63 63
ReadX 12882 1769418 65471 65471
ReadX 12882 1834889 63 63
ReadX 12882 1834952 32824 32824
Close 12882
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW 1
NTCreateX \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS 0x40 0x1 12883
QUERY_FILE_INFORMATION 12883
ReadX 12883 0 512 512
ReadX 12883 512 512 512
ReadX 12883 1024 512 512
QUERY_FILE_INFORMATION 12883
QUERY_FILE_INFORMATION 12883
ReadX 12883 512 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FILE_INFORMATION 12883
QUERY_FILE_INFORMATION 12883
ReadX 12883 512 4096 4096
QUERY_FILE_INFORMATION 12883
QUERY_FILE_INFORMATION 12883
QUERY_FILE_INFORMATION 12883
WriteX 12883 512 4096 4096
WriteX 12883 1024 512 512
ReadX 12883 502 512 512
QUERY_FILE_INFORMATION 12883
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12883 2560 512 512
ReadX 12883 1536 512 512
ReadX 12883 2176 384 384
ReadX 12883 3072 128 128
ReadX 12883 3107 512 512
ReadX 12883 3619 512 512
ReadX 12883 4131 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12883 286 123 123
ReadX 12883 292 24 24
ReadX 12883 512 2048 2048
ReadX 12883 512 2048 2048
ReadX 12883 2560 2048 2048
ReadX 12883 416 1536 1536
ReadX 12883 768 512 512
ReadX 12883 1280 2048 2048
ReadX 12883 3328 2048 2048
ReadX 12883 5376 2048 2048
ReadX 12883 7424 2048 2048
ReadX 12883 9472 2048 2048
ReadX 12883 11520 2048 2048
ReadX 12883 13568 2048 2048
ReadX 12883 15616 2048 2048
ReadX 12883 17664 2048 2048
ReadX 12883 19712 2048 2048
ReadX 12883 21760 2048 2048
ReadX 12883 23808 2048 2048
ReadX 12883 25856 2048 2048
ReadX 12883 27904 2048 2048
ReadX 12883 29952 2048 2048
ReadX 12883 32000 2048 2048
ReadX 12883 34048 2048 2048
ReadX 12883 36096 2048 2048
ReadX 12883 38144 2048 2048
ReadX 12883 40192 2048 2048
ReadX 12883 42240 512 512
ReadX 12883 42752 2048 2048
ReadX 12883 44800 2048 2048
ReadX 12883 46848 2048 2048
ReadX 12883 48896 2048 2048
ReadX 12883 50944 2048 2048
ReadX 12883 52992 2048 2048
ReadX 12883 55040 2048 2048
ReadX 12883 57088 2048 2048
ReadX 12883 316 2048 2048
ReadX 12883 2364 2048 2048
ReadX 12883 4412 2048 2048
ReadX 12883 6460 2048 2048
ReadX 12883 8508 2048 2048
ReadX 12883 10556 2048 2048
ReadX 12883 12604 2048 2048
ReadX 12883 14652 2048 2048
ReadX 12883 16700 2048 2048
ReadX 12883 18748 2048 2048
ReadX 12883 20796 2048 2048
ReadX 12883 22844 2048 2048
ReadX 12883 24892 2048 2048
ReadX 12883 26940 2048 2048
ReadX 12883 28988 2048 2048
ReadX 12883 31036 2048 2048
ReadX 12883 436 2048 2048
ReadX 12883 2484 2048 2048
ReadX 12883 4532 2048 2048
ReadX 12883 6580 2048 2048
ReadX 12883 8628 2048 2048
ReadX 12883 10676 2048 2048
ReadX 12883 476 2048 2048
ReadX 12883 476 2048 2048
ReadX 12883 476 2048 2048
ReadX 12883 2524 2048 2048
ReadX 12883 484 2048 2048
ReadX 12883 484 2048 2048
ReadX 12883 484 2048 2048
ReadX 12883 2532 665 665
ReadX 12883 492 665 665
ReadX 12883 492 665 665
ReadX 12883 492 665 665
ReadX 12883 296 512 512
ReadX 12883 318 512 512
ReadX 12883 300 512 512
ReadX 12883 312 512 512
ReadX 12883 320 512 512
ReadX 12883 832 354 354
ReadX 12883 504 4096 4096
ReadX 12883 496 1428 1428
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x2 12884
Close 12884
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\5D7C0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\5D7C0000 0x40 0x2 12885
WriteX 12885 1535 1 1
QUERY_FILE_INFORMATION 12885
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12883 296 1251 1251
ReadX 12883 2176 384 384
ReadX 12883 3072 1634 1634
QUERY_FILE_INFORMATION 12885
WriteX 12885 0 57088 57088
WriteX 12885 0 4096 4096
Flush 12885
Close 12883
NTCreateX \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS 0x40 0x1 12886
Close 12886
WriteX 12885 0 4096 4096
Close 12885
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\5D7C0000
NTCreateX \clients\client1\~dmtmp\EXCEL\5D7C0000 0x200000 0x1 12887
Close 12887
Rename \clients\client1\~dmtmp\EXCEL\5D7C0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 12888
QUERY_FILE_INFORMATION 12888
ReadX 12888 0 512 512
ReadX 12888 512 512 512
ReadX 12888 1024 512 512
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
ReadX 12888 512 2048 2048
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12888 4096 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\0BBC0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\0BBC0000 0x40 0x2 12889
WriteX 12889 1535 1 1
QUERY_FILE_INFORMATION 12889
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12888 1536 512 512
ReadX 12888 288 1251 1251
ReadX 12888 2048 2018 2018
QUERY_FILE_INFORMATION 12889
WriteX 12889 0 51456 51456
WriteX 12889 0 4096 4096
Flush 12889
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
Close 12888
WriteX 12889 0 4096 4096
Close 12889
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\0BBC0000
NTCreateX \clients\client1\~dmtmp\EXCEL\0BBC0000 0x200000 0x1 12890
Close 12890
Rename \clients\client1\~dmtmp\EXCEL\0BBC0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 12891
QUERY_FILE_INFORMATION 12891
ReadX 12891 0 512 512
ReadX 12891 512 512 512
ReadX 12891 1024 512 512
QUERY_FILE_INFORMATION 12891
QUERY_FILE_INFORMATION 12891
ReadX 12891 512 2048 2048
QUERY_FILE_INFORMATION 12891
QUERY_FILE_INFORMATION 12891
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12891 4096 512 512
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x2 12893
Close 12893
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x2 12895
WriteX 12895 4045 1 1
QUERY_FILE_INFORMATION 12895
WriteX 12895 0 53077 53077
Close 12895
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\51EC0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\51EC0000 0x40 0x2 12896
WriteX 12896 1535 1 1
QUERY_FILE_INFORMATION 12896
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12891 1536 512 512
ReadX 12891 288 1251 1251
ReadX 12891 2048 2018 2018
QUERY_FILE_INFORMATION 12896
WriteX 12896 0 65471 65471
WriteX 12896 65471 65 65
WriteX 12896 65536 1856 1856
WriteX 12896 0 4096 4096
Flush 12896
QUERY_FILE_INFORMATION 12891
QUERY_FILE_INFORMATION 12891
Close 12891
WriteX 12896 0 4096 4096
Close 12896
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\51EC0000
NTCreateX \clients\client1\~dmtmp\EXCEL\51EC0000 0x200000 0x1 12897
Close 12897
Rename \clients\client1\~dmtmp\EXCEL\51EC0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 12898
QUERY_FILE_INFORMATION 12898
ReadX 12898 0 512 512
ReadX 12898 512 512 512
ReadX 12898 1024 512 512
QUERY_FILE_INFORMATION 12898
QUERY_FILE_INFORMATION 12898
ReadX 12898 576 2048 2048
QUERY_FILE_INFORMATION 12898
QUERY_FILE_INFORMATION 12898
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x2 12900
Close 12900
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x2 12902
WriteX 12902 4076 1 1
QUERY_FILE_INFORMATION 12902
WriteX 12902 0 7983 7983
Close 12902
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x2 12904
Close 12904
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x2 12906
WriteX 12906 4095 1 1
QUERY_FILE_INFORMATION 12906
WriteX 12906 0 65471 65471
WriteX 12906 65471 65 65
WriteX 12906 65536 65471 65471
WriteX 12906 131007 65 65
WriteX 12906 131072 65471 65471
WriteX 12906 196543 65 65
WriteX 12906 196608 65471 65471
WriteX 12906 262079 65 65
WriteX 12906 262144 65471 65471
WriteX 12906 327615 65 65
WriteX 12906 327680 65471 65471
WriteX 12906 393151 65 65
WriteX 12906 393216 65471 65471
WriteX 12906 458687 65 65
WriteX 12906 458752 46731 46731
Close 12906
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\62AD0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\62AD0000 0x40 0x2 12907
WriteX 12907 1535 1 1
QUERY_FILE_INFORMATION 12907
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12898 1536 512 512
ReadX 12898 2048 2018 2018
ReadX 12898 4096 512 512
ReadX 12898 4608 2197 2197
QUERY_FILE_INFORMATION 12907
WriteX 12907 0 65471 65471
WriteX 12907 65471 65 65
WriteX 12907 65536 22848 22848
WriteX 12907 0 4096 4096
Flush 12907
QUERY_FILE_INFORMATION 12898
QUERY_FILE_INFORMATION 12898
Close 12898
WriteX 12907 0 4096 4096
Close 12907
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\62AD0000
NTCreateX \clients\client1\~dmtmp\EXCEL\62AD0000 0x200000 0x1 12908
Close 12908
Rename \clients\client1\~dmtmp\EXCEL\62AD0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 12909
QUERY_FILE_INFORMATION 12909
ReadX 12909 0 512 512
ReadX 12909 512 512 512
ReadX 12909 1024 512 512
QUERY_FILE_INFORMATION 12909
QUERY_FILE_INFORMATION 12909
ReadX 12909 576 2048 2048
QUERY_FILE_INFORMATION 12909
QUERY_FILE_INFORMATION 12909
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 4096 512 512
Close 12909
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLA 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLT 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLM 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLW 1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES.XLS 0x40 0x1 12910
QUERY_FILE_INFORMATION 12910
ReadX 12910 0 512 512
ReadX 12910 512 512 512
ReadX 12910 1024 512 512
QUERY_FILE_INFORMATION 12910
QUERY_FILE_INFORMATION 12910
ReadX 12910 288 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FILE_INFORMATION 12910
QUERY_FILE_INFORMATION 12910
ReadX 12910 288 4096 4096
QUERY_FILE_INFORMATION 12910
QUERY_FILE_INFORMATION 12910
QUERY_FILE_INFORMATION 12910
WriteX 12910 288 4096 4096
WriteX 12910 1024 512 512
ReadX 12910 1536 512 512
QUERY_FILE_INFORMATION 12910
ReadX 12910 288 2048 2048
ReadX 12910 2336 2048 2048
ReadX 12910 3072 1536 1536
ReadX 12910 544 512 512
ReadX 12910 1056 2048 2048
ReadX 12910 3104 2048 2048
ReadX 12910 5152 2048 2048
ReadX 12910 7200 2048 2048
ReadX 12910 9248 2048 2048
ReadX 12910 11296 2048 2048
ReadX 12910 13344 2048 2048
ReadX 12910 15392 2048 2048
ReadX 12910 17440 2048 2048
ReadX 12910 19488 2048 2048
ReadX 12910 21536 2048 2048
ReadX 12910 23584 2048 2048
ReadX 12910 25632 2048 2048
ReadX 12910 27680 2048 2048
ReadX 12910 29728 2048 2048
ReadX 12910 31776 2048 2048
ReadX 12910 33824 2048 2048
ReadX 12910 35872 2048 2048
ReadX 12910 37920 2048 2048
ReadX 12910 39968 2048 2048
ReadX 12910 42016 512 512
ReadX 12910 42528 512 512
ReadX 12910 43040 1536 1536
ReadX 12910 44576 2048 2048
ReadX 12910 46624 2048 2048
ReadX 12910 48672 2048 2048
ReadX 12910 50720 2048 2048
ReadX 12910 52768 2048 2048
ReadX 12910 54816 2048 2048
ReadX 12910 56864 2048 2048
ReadX 12910 58912 2048 2048
ReadX 12910 60960 2048 2048
ReadX 12910 63008 2048 2048
ReadX 12910 65056 2048 2048
ReadX 12910 67104 2048 2048
ReadX 12910 69152 2048 2048
ReadX 12910 71200 2048 2048
ReadX 12910 73248 2048 2048
ReadX 12910 75296 2048 2048
ReadX 12910 77344 2048 2048
ReadX 12910 79392 2048 2048
ReadX 12910 81440 2048 2048
ReadX 12910 83488 2048 2048
ReadX 12910 85536 512 512
ReadX 12910 86048 512 512
ReadX 12910 86560 1536 1536
ReadX 12910 88096 2048 2048
ReadX 12910 90144 2048 2048
ReadX 12910 92192 2048 2048
ReadX 12910 94240 2048 2048
ReadX 12910 96288 2048 2048
ReadX 12910 552 2048 2048
ReadX 12910 2600 2048 2048
ReadX 12910 4648 2048 2048
ReadX 12910 6696 2048 2048
ReadX 12910 8744 2048 2048
ReadX 12910 10792 2048 2048
ReadX 12910 12840 2048 2048
ReadX 12910 14888 2048 2048
ReadX 12910 16936 2048 2048
ReadX 12910 18984 2048 2048
ReadX 12910 21032 2048 2048
ReadX 12910 23080 2048 2048
ReadX 12910 25128 2048 2048
ReadX 12910 27176 2048 2048
ReadX 12910 29224 2048 2048
ReadX 12910 31272 2048 2048
ReadX 12910 33320 2048 2048
ReadX 12910 35368 2048 2048
ReadX 12910 37416 2048 2048
ReadX 12910 39464 2048 2048
ReadX 12910 41512 512 512
ReadX 12910 42024 512 512
ReadX 12910 42536 1536 1536
ReadX 12910 44072 2048 2048
ReadX 12910 46120 2048 2048
ReadX 12910 48168 2048 2048
ReadX 12910 50216 2048 2048
ReadX 12910 52264 2048 2048
ReadX 12910 54312 2048 2048
ReadX 12910 56360 2048 2048
ReadX 12910 58408 2048 2048
ReadX 12910 60456 2048 2048
ReadX 12910 62504 2048 2048
ReadX 12910 64552 2048 2048
ReadX 12910 66600 2048 2048
ReadX 12910 68648 2048 2048
ReadX 12910 70696 2048 2048
ReadX 12910 72744 2048 2048
ReadX 12910 74792 2048 2048
ReadX 12910 76840 2048 2048
ReadX 12910 78888 2048 2048
ReadX 12910 80936 2048 2048
ReadX 12910 82984 2048 2048
ReadX 12910 85032 512 512
ReadX 12910 85544 2048 2048
ReadX 12910 87592 2048 2048
ReadX 12910 89640 2048 2048
ReadX 12910 91688 2048 2048
ReadX 12910 93736 2048 2048
ReadX 12910 95784 2048 2048
ReadX 12910 97832 2048 2048
ReadX 12910 99880 2048 2048
ReadX 12910 101928 2048 2048
ReadX 12910 103976 2048 2048
ReadX 12910 106024 2048 2048
ReadX 12910 108072 2048 2048
ReadX 12910 110120 2048 2048
ReadX 12910 112168 2048 2048
ReadX 12910 114216 2048 2048
ReadX 12910 116264 2048 2048
ReadX 12910 118312 2048 2048
ReadX 12910 120360 2048 2048
ReadX 12910 122408 2048 2048
ReadX 12910 124456 512 512
ReadX 12910 124968 512 512
ReadX 12910 125480 1536 1536
ReadX 12910 127016 2048 2048
ReadX 12910 129064 2048 2048
ReadX 12910 131112 2048 2048
ReadX 12910 133160 2048 2048
ReadX 12910 135208 2048 2048
ReadX 12910 137256 2048 2048
ReadX 12910 139304 2048 2048
ReadX 12910 141352 2048 2048
ReadX 12910 143400 2048 2048
ReadX 12910 145448 2048 2048
ReadX 12910 147496 2048 2048
ReadX 12910 149544 2048 2048
ReadX 12910 151592 2048 2048
ReadX 12910 153640 2048 2048
ReadX 12910 155688 2048 2048
ReadX 12910 157736 2048 2048
ReadX 12910 159784 2048 2048
ReadX 12910 161832 2048 2048
ReadX 12910 163880 2048 2048
ReadX 12910 165928 2048 2048
ReadX 12910 167976 2048 2048
ReadX 12910 170024 512 512
ReadX 12910 1538 1536 1536
ReadX 12910 3074 2048 2048
ReadX 12910 5122 2048 2048
ReadX 12910 7170 2048 2048
ReadX 12910 9218 2048 2048
ReadX 12910 11266 2048 2048
ReadX 12910 13314 2048 2048
ReadX 12910 15362 2048 2048
ReadX 12910 17410 2048 2048
ReadX 12910 19458 2048 2048
ReadX 12910 21506 2048 2048
ReadX 12910 23554 2048 2048
ReadX 12910 25602 2048 2048
ReadX 12910 27650 2048 2048
ReadX 12910 29698 2048 2048
ReadX 12910 31746 2048 2048
ReadX 12910 33794 2048 2048
ReadX 12910 35842 2048 2048
ReadX 12910 37890 2048 2048
ReadX 12910 39938 2048 2048
ReadX 12910 41986 2048 2048
ReadX 12910 44034 875 875
ReadX 12910 1730 4096 4096
ReadX 12910 1724 1536 1536
ReadX 12910 1746 588 588
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLS
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1 1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.XLS 0x40 0x2 12911
Close 12911
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.XLS 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\E0BD0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\E0BD0000 0x40 0x2 12912
WriteX 12912 2047 1 1
QUERY_FILE_INFORMATION 12912
Close 12910
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES.XLS 0x40 0x1 12913
Close 12913
WriteX 12912 0 42388 42388
Close 12912
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.XLS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\E0BD0000
NTCreateX \clients\client1\~dmtmp\EXCEL\E0BD0000 0x200000 0x1 12914
Close 12914
Rename \clients\client1\~dmtmp\EXCEL\E0BD0000 \clients\client1\~dmtmp\EXCEL\SALES1.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.XLS 0x40 0x1 12915
QUERY_FILE_INFORMATION 12915
ReadX 12915 0 512 512
ReadX 12915 1756 512 512
ReadX 12915 2268 512 512
QUERY_FILE_INFORMATION 12915
QUERY_FILE_INFORMATION 12915
ReadX 12915 1744 512 512
ReadX 12915 2256 512 512
ReadX 12915 2768 512 512
ReadX 12915 3280 512 512
ReadX 12915 3792 512 512
ReadX 12915 4304 512 512
ReadX 12915 512 2048 2048
QUERY_FILE_INFORMATION 12915
QUERY_FILE_INFORMATION 12915
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\BEED0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\BEED0000 0x40 0x2 12916
WriteX 12916 2047 1 1
QUERY_FILE_INFORMATION 12916
QUERY_FILE_INFORMATION 12915
QUERY_FILE_INFORMATION 12915
Close 12915
WriteX 12916 0 42652 42652
Close 12916
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\BEED0000
NTCreateX \clients\client1\~dmtmp\EXCEL\BEED0000 0x200000 0x1 12917
Close 12917
Rename \clients\client1\~dmtmp\EXCEL\BEED0000 \clients\client1\~dmtmp\EXCEL\SALES1.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.XLS 0x40 0x1 12918
QUERY_FILE_INFORMATION 12918
ReadX 12918 0 512 512
ReadX 12918 1762 512 512
ReadX 12918 2274 512 512
QUERY_FILE_INFORMATION 12918
QUERY_FILE_INFORMATION 12918
ReadX 12918 1750 512 512
ReadX 12918 2262 512 512
ReadX 12918 2774 512 512
ReadX 12918 3286 512 512
ReadX 12918 3798 512 512
ReadX 12918 4310 512 512
ReadX 12918 512 2048 2048
QUERY_FILE_INFORMATION 12918
QUERY_FILE_INFORMATION 12918
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.PRN 1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x2 12920
Close 12920
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x2 12922
WriteX 12922 4080 1 1
QUERY_FILE_INFORMATION 12922
WriteX 12922 0 65471 65471
WriteX 12922 65471 65 65
WriteX 12922 65536 49 49
Close 12922
Close 12918
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 12923
WriteX 12923 0 65471 65471
WriteX 12923 65471 63 63
WriteX 12923 65534 65471 65471
WriteX 12923 131005 63 63
Close 12923
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 12924
WriteX 12924 0 65471 65471
WriteX 12924 65471 63 63
WriteX 12924 65534 65471 65471
WriteX 12924 131005 63 63
WriteX 12924 131068 65471 65471
WriteX 12924 196539 63 63
WriteX 12924 196602 65471 65471
WriteX 12924 262073 63 63
Close 12924
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 12925
WriteX 12925 0 65471 65471
WriteX 12925 65471 63 63
WriteX 12925 65534 65471 65471
WriteX 12925 131005 63 63
WriteX 12925 131068 65471 65471
WriteX 12925 196539 63 63
WriteX 12925 196602 65471 65471
WriteX 12925 262073 63 63
WriteX 12925 262136 65471 65471
WriteX 12925 327607 63 63
WriteX 12925 327670 65471 65471
WriteX 12925 393141 63 63
WriteX 12925 393204 65471 65471
WriteX 12925 458675 63 63
WriteX 12925 458738 65471 65471
WriteX 12925 524209 63 63
Close 12925
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\PMC162.TMP 0x40 0x2 12926
Close 12926
Unlink \clients\client1\~dmtmp\PM\PMC162.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMC162.TMP 0x40 0x2 12927
Close 12927
Unlink \clients\client1\~dmtmp\PM\PMC162.TMP
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\C 1
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC175.TMP 0x40 0x2 12930
Close 12930
Unlink \clients\client1\~dmtmp\PM\PMC175.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC176.TMP 0x40 0x2 12932
Close 12932
Unlink \clients\client1\~dmtmp\PM\PMC176.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMC180.TMP 0x40 0x2 12933
Close 12933
Unlink \clients\client1\~dmtmp\PM\PMC180.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\P 1
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC183.TMP 0x40 0x2 12936
Close 12936
Unlink \clients\client1\~dmtmp\PM\PMC183.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC183.TMP 0x40 0x2 12938
Close 12938
Unlink \clients\client1\~dmtmp\PM\PMC183.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMC183.TMP 0x40 0x2 12939
Close 12939
Unlink \clients\client1\~dmtmp\PM\PMC183.TMP
NTCreateX \clients\client1\~dmtmp\PM\B 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\B 1
NTCreateX \clients\client1\~dmtmp\PM\B 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 12942
Close 12942
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\B 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BE 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BE 1
NTCreateX \clients\client1\~dmtmp\PM\BE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 12946
Close 12946
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\BE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BEN 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BEN 1
NTCreateX \clients\client1\~dmtmp\PM\BEN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 12950
Close 12950
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\BEN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENC 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENC 1
NTCreateX \clients\client1\~dmtmp\PM\BENC 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 12954
Close 12954
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENC 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCH 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCH 1
NTCreateX \clients\client1\~dmtmp\PM\BENCH 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC185.TMP 0x40 0x2 12958
Close 12958
Unlink \clients\client1\~dmtmp\PM\PMC185.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCH 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCHD 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHD 1
NTCreateX \clients\client1\~dmtmp\PM\BENCHD 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC185.TMP 0x40 0x2 12962
Close 12962
Unlink \clients\client1\~dmtmp\PM\PMC185.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCHD 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDE 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHDE 1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC185.TMP 0x40 0x2 12966
Close 12966
Unlink \clients\client1\~dmtmp\PM\PMC185.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCHDE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDES 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHDES 1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDES 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC186.TMP 0x40 0x2 12970
Close 12970
Unlink \clients\client1\~dmtmp\PM\PMC186.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCHDES 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHDES 1
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\PMC1A2.TMP 0x40 0x2 12972
Close 12972
Unlink \clients\client1\~dmtmp\PM\PMC1A2.TMP
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BDES1.PRN 1
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x2 12974
Close 12974
Unlink \clients\client1\~dmtmp\PM\BDES1.PRN
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x2 12976
WriteX 12976 4095 1 1
QUERY_FILE_INFORMATION 12976
QUERY_FS_INFORMATION 259
WriteX 12976 0 65471 65471
WriteX 12976 65471 65 65
WriteX 12976 65536 65471 65471
WriteX 12976 131007 65 65
WriteX 12976 131072 65471 65471
WriteX 12976 196543 65 65
WriteX 12976 196608 65471 65471
WriteX 12976 262079 65 65
WriteX 12976 262144 26634 26634
Close 12976
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BDES1 1
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\T 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1.X 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1.XL 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 12981
QUERY_FILE_INFORMATION 12981
QUERY_FILE_INFORMATION 12981
Close 12981
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 12982
Close 12982
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 12983
Close 12983
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 12984
QUERY_FILE_INFORMATION 12984
ReadX 12984 0 512 512
ReadX 12984 288 512 512
ReadX 12984 800 512 512
Close 12984
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 12985
ReadX 12985 0 24 24
Close 12985
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 12986
ReadX 12986 0 24 24
Close 12986
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 12987
QUERY_FILE_INFORMATION 12987
ReadX 12987 0 512 512
ReadX 12987 288 512 512
ReadX 12987 800 512 512
ReadX 12987 512 4096 4096
QUERY_FS_INFORMATION 259
ReadX 12987 1759 2849 2849
Close 12987
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 12988
Close 12988
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\C 1
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 12991
Close 12991
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 12993
Close 12993
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 12994
Close 12994
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\P 1
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD391.TMP 0x40 0x2 12997
Close 12997
Unlink \clients\client1\~dmtmp\PM\PMD391.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD391.TMP 0x40 0x2 12999
Close 12999
Unlink \clients\client1\~dmtmp\PM\PMD391.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13000
Close 13000
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\C 1
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13003
Close 13003
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CS 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CS 1
NTCreateX \clients\client1\~dmtmp\PM\CS 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13007
Close 13007
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\CS 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN 1
NTCreateX \clients\client1\~dmtmp\PM\CSN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13011
Close 13011
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13015
Close 13015
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_ 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_ 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_ 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD393.TMP 0x40 0x2 13019
Close 13019
Unlink \clients\client1\~dmtmp\PM\PMD393.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_ 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD393.TMP 0x40 0x2 13023
Close 13023
Unlink \clients\client1\~dmtmp\PM\PMD393.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD394.TMP 0x40 0x2 13026
Close 13026
Unlink \clients\client1\~dmtmp\PM\PMD394.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.P 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2.P 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD394.TMP 0x40 0x2 13030
Close 13030
Unlink \clients\client1\~dmtmp\PM\PMD394.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.PM 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2.PM 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.PM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD394.TMP 0x40 0x2 13034
Close 13034
Unlink \clients\client1\~dmtmp\PM\PMD394.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.PM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD395.TMP 0x40 0x2 13036
Close 13036
Unlink \clients\client1\~dmtmp\PM\PMD395.TMP
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\PMD3A4.TMP 0x40 0x2 13037
Close 13037
Unlink \clients\client1\~dmtmp\PM\PMD3A4.TMP
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2A 1
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\E 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EV 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVEN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.D 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DO 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13046
QUERY_FILE_INFORMATION 13046
QUERY_FILE_INFORMATION 13046
Close 13046
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13047
Close 13047
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13048
Close 13048
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13049
QUERY_FILE_INFORMATION 13049
ReadX 13049 0 512 512
ReadX 13049 288 512 512
ReadX 13049 800 512 512
Close 13049
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13050
ReadX 13050 0 24 24
Close 13050
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13051
QUERY_FILE_INFORMATION 13051
ReadX 13051 0 512 512
ReadX 13051 288 512 512
ReadX 13051 800 512 512
ReadX 13051 512 36 36
Close 13051
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13052
QUERY_FILE_INFORMATION 13052
ReadX 13052 0 512 512
ReadX 13052 288 512 512
ReadX 13052 800 512 512
ReadX 13052 512 682 682
ReadX 13052 3584 106 106
ReadX 13052 3712 10 10
ReadX 13052 3722 10 10
ReadX 13052 512 2048 2048
ReadX 13052 3072 512 512
ReadX 13052 276 84 84
ReadX 13052 273 49 49
ReadX 13052 2560 512 512
Close 13052
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\M 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MO 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOV 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED.D 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DO 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13062
QUERY_FILE_INFORMATION 13062
QUERY_FILE_INFORMATION 13062
Close 13062
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13063
Close 13063
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13064
Close 13064
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13065
QUERY_FILE_INFORMATION 13065
ReadX 13065 0 512 512
ReadX 13065 288 512 512
ReadX 13065 800 512 512
Close 13065
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13066
ReadX 13066 0 24 24
Close 13066
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13067
QUERY_FILE_INFORMATION 13067
ReadX 13067 0 512 512
ReadX 13067 288 512 512
ReadX 13067 800 512 512
ReadX 13067 512 36 36
Close 13067
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13068
QUERY_FILE_INFORMATION 13068
ReadX 13068 0 512 512
ReadX 13068 288 512 512
ReadX 13068 800 512 512
ReadX 13068 512 682 682
ReadX 13068 3072 106 106
ReadX 13068 3200 10 10
ReadX 13068 3210 10 10
ReadX 13068 512 2048 2048
ReadX 13068 2560 512 512
ReadX 13068 3887 84 84
ReadX 13068 3838 49 49
ReadX 13068 2048 512 512
Close 13068
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD
FIND_FIRST \clients\client1\~dmtmp\WORD\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC
Unlink \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
Unlink \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL
FIND_FIRST \clients\client1\~dmtmp\EXCEL\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.XLS
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.PRN
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT
FIND_FIRST \clients\client1\~dmtmp\PWRPNT\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
Unlink \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
Unlink \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL
FIND_FIRST \clients\client1\~dmtmp\COREL\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR
Unlink \clients\client1\~dmtmp\COREL\GRAPH1.CDR
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.BAK
Unlink \clients\client1\~dmtmp\COREL\GRAPH1.BAK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR
Unlink \clients\client1\~dmtmp\COREL\GRAPH2.CDR
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.BAK
Unlink \clients\client1\~dmtmp\COREL\GRAPH2.BAK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO
FIND_FIRST \clients\client1\~dmtmp\WORDPRO\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
FIND_FIRST \clients\client1\~dmtmp\PM\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BDES1.PRN
Unlink \clients\client1\~dmtmp\PM\BDES1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX
FIND_FIRST \clients\client1\~dmtmp\PARADOX\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.VAL
Unlink \clients\client1\~dmtmp\PARADOX\COURSES.VAL
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\CHANGED.DB
Unlink \clients\client1\~dmtmp\PARADOX\CHANGED.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.MB
Unlink \clients\client1\~dmtmp\PARADOX\ANSWER.MB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.DB
Unlink \clients\client1\~dmtmp\PARADOX\ANSWER.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS
FIND_FIRST \clients\client1\~dmtmp\ACCESS\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\INV.PRN
Unlink \clients\client1\~dmtmp\ACCESS\INV.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\SALES.PRN
Unlink \clients\client1\~dmtmp\ACCESS\SALES.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\LABELS.PRN
Unlink \clients\client1\~dmtmp\ACCESS\LABELS.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\SEED\*
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 13069
Close 13069
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 13070
QUERY_FILE_INFORMATION 13070
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.~TS
QUERY_FILE_INFORMATION 13070
QUERY_FILE_INFORMATION 13070
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 13071
QUERY_FILE_INFORMATION 13071
QUERY_FILE_INFORMATION 13071
QUERY_FILE_INFORMATION 13071
ReadX 13071 2156 24 24
ReadX 13071 2139 276 276
ReadX 13071 2136 14 14
ReadX 13071 2136 7 7
ReadX 13071 2138 12 12
ReadX 13071 2137 8 8
ReadX 13071 2135 15 15
ReadX 13071 0 16 16
ReadX 13071 16 2048 2048
ReadX 13071 2064 2048 2048
ReadX 13071 257 2048 2048
ReadX 13071 385 2048 2048
ReadX 13071 513 2048 2048
ReadX 13071 641 2048 2048
ReadX 13071 769 2048 2048
ReadX 13071 897 2048 2048
ReadX 13071 1025 2048 2048
ReadX 13071 1153 2048 2048
ReadX 13071 1281 2048 2048
ReadX 13071 1409 2048 2048
ReadX 13071 1537 408 408
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x2 13073
Close 13073
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13075
WriteX 13075 15 1 1
QUERY_FILE_INFORMATION 13075
WriteX 13075 0 10575 10575
Flush 13075
Close 13075
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13076
Close 13076
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 13077
QUERY_FILE_INFORMATION 13077
QUERY_FILE_INFORMATION 13077
QUERY_FILE_INFORMATION 13077
ReadX 13077 2157 24 24
ReadX 13077 2139 276 276
ReadX 13077 2137 14 14
ReadX 13077 2137 7 7
ReadX 13077 2139 12 12
ReadX 13077 2138 8 8
ReadX 13077 2136 15 15
Close 13071
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.~TS
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13078
Close 13078
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13079
QUERY_FILE_INFORMATION 13079
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13080
QUERY_FILE_INFORMATION 13080
ReadX 13080 0 512 512
ReadX 13080 512 512 512
ReadX 13080 1024 512 512
QUERY_FILE_INFORMATION 13080
QUERY_FILE_INFORMATION 13080
Close 13080
QUERY_FILE_INFORMATION 13079
ReadX 13079 0 24 24
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13081
QUERY_FILE_INFORMATION 13081
ReadX 13081 0 512 512
ReadX 13081 512 512 512
ReadX 13081 1024 512 512
ReadX 13081 288 20 20
ReadX 13081 308 2084 2084
ReadX 13081 388 2084 2084
ReadX 13081 388 2084 2084
ReadX 13070 2157 1386 1386
ReadX 13081 2472 399 399
ReadX 13081 3072 1536 1536
ReadX 13081 544 149 149
ReadX 13081 693 485 485
Close 13081
ReadX 13070 2157 4096 4096
ReadX 13070 6253 4096 4096
ReadX 13070 10349 4096 4096
ReadX 13070 14445 4096 4096
ReadX 13070 18541 4096 4096
ReadX 13070 22637 256 256
ReadX 13070 22893 4096 4096
ReadX 13070 26989 4096 4096
ReadX 13070 31085 4096 4096
ReadX 13070 35181 4096 4096
ReadX 13070 39277 4096 4096
ReadX 13070 43373 4096 4096
ReadX 13070 47469 4096 4096
QUERY_FS_INFORMATION 259
ReadX 13070 2157 1024 1024
ReadX 13070 1667 4688 4688
ReadX 13070 6355 3516 3516
ReadX 13070 9871 16384 16384
ReadX 13070 26255 3771 3771
ReadX 13070 30026 2048 2048
ReadX 13070 32074 1024 1024
ReadX 13070 33098 6652 6652
ReadX 13070 39750 16384 16384
ReadX 13070 56134 10496 10496
ReadX 13070 66630 1784 1784
ReadX 13070 68414 90 90
ReadX 13070 68504 273 273
ReadX 13070 68777 1600 1600
ReadX 13070 70377 640 640
ReadX 13070 71017 1280 1280
ReadX 13070 72297 8464 8464
ReadX 13070 80761 158 158
ReadX 13070 80919 912 912
ReadX 13070 81831 1980 1980
ReadX 13070 83811 2256 2256
ReadX 13070 86067 400 400
ReadX 13070 86467 252 252
ReadX 13070 86719 42 42
ReadX 13070 86761 725 725
ReadX 13070 2009 512 512
ReadX 13070 3895 9 9
ReadX 13070 3781 46 46
ReadX 13070 4059 92 92
ReadX 13070 3781 92 92
ReadX 13070 3986 184 184
ReadX 13070 3987 16384 16384
ReadX 13070 3902 16384 16384
ReadX 13070 3781 10240 10240
ReadX 13070 3821 16384 16384
ReadX 13070 3891 935 935
ReadX 13070 4060 10240 10240
ReadX 13070 4059 184 184
ReadX 13070 256 184 184
ReadX 13070 256 1026 1026
ReadX 13070 3901 326 326
ReadX 13070 3899 652 652
ReadX 13070 256 2 2
ReadX 13070 258 4948 4948
Close 13070
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x2 13083
Close 13083
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x2 13085
WriteX 13085 4055 1 1
QUERY_FILE_INFORMATION 13085
WriteX 13085 0 65471 65471
WriteX 13085 65471 65 65
WriteX 13085 65536 65471 65471
WriteX 13085 131007 65 65
WriteX 13085 131072 65471 65471
WriteX 13085 196543 65 65
WriteX 13085 196608 65471 65471
WriteX 13085 262079 65 65
WriteX 13085 262144 65471 65471
WriteX 13085 327615 65 65
WriteX 13085 327680 65471 65471
WriteX 13085 393151 65 65
WriteX 13085 393216 65471 65471
WriteX 13085 458687 65 65
WriteX 13085 458752 65471 65471
WriteX 13085 524223 65 65
WriteX 13085 524288 65471 65471
WriteX 13085 589759 65 65
WriteX 13085 589824 35257 35257
Close 13085
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x2 13087
Close 13087
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x2 13089
WriteX 13089 4055 1 1
QUERY_FILE_INFORMATION 13089
WriteX 13089 0 65471 65471
WriteX 13089 65471 65 65
WriteX 13089 65536 65471 65471
WriteX 13089 131007 65 65
WriteX 13089 131072 65471 65471
WriteX 13089 196543 65 65
WriteX 13089 196608 65471 65471
WriteX 13089 262079 65 65
WriteX 13089 262144 65471 65471
WriteX 13089 327615 65 65
WriteX 13089 327680 65471 65471
WriteX 13089 393151 65 65
WriteX 13089 393216 65471 65471
WriteX 13089 458687 65 65
WriteX 13089 458752 65471 65471
WriteX 13089 524223 65 65
WriteX 13089 524288 65471 65471
WriteX 13089 589759 65 65
WriteX 13089 589824 57598 57598
Close 13089
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13091
WriteX 13091 15 1 1
QUERY_FILE_INFORMATION 13091
WriteX 13091 0 12543 12543
Flush 13091
Close 13091
Close 13077
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13092
Close 13092
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 13093
QUERY_FILE_INFORMATION 13093
QUERY_FILE_INFORMATION 13093
QUERY_FILE_INFORMATION 13093
ReadX 13093 288 24 24
ReadX 13093 287 276 276
ReadX 13093 286 14 14
ReadX 13093 286 7 7
ReadX 13093 287 12 12
ReadX 13093 287 8 8
ReadX 13093 286 15 15
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 13094
Close 13094
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 13095
QUERY_FILE_INFORMATION 13095
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS
QUERY_FILE_INFORMATION 13095
QUERY_FILE_INFORMATION 13095
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 13096
QUERY_FILE_INFORMATION 13096
QUERY_FILE_INFORMATION 13096
QUERY_FILE_INFORMATION 13096
ReadX 13096 1938 24 24
ReadX 13096 1920 276 276
ReadX 13096 1918 14 14
ReadX 13096 1918 7 7
ReadX 13096 1919 12 12
ReadX 13096 1919 8 8
ReadX 13096 1917 15 15
ReadX 13096 0 16 16
ReadX 13096 16 2048 2048
ReadX 13096 2064 2048 2048
ReadX 13096 257 2048 2048
ReadX 13096 385 2048 2048
ReadX 13096 513 2048 2048
ReadX 13096 641 2048 2048
ReadX 13096 769 2048 2048
ReadX 13096 897 2048 2048
ReadX 13096 1025 2048 2048
ReadX 13096 1153 1385 1385
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x2 13098
Close 13098
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13100
WriteX 13100 15 1 1
QUERY_FILE_INFORMATION 13100
WriteX 13100 0 11588 11588
Flush 13100
Close 13100
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13101
Close 13101
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 13102
QUERY_FILE_INFORMATION 13102
QUERY_FILE_INFORMATION 13102
QUERY_FILE_INFORMATION 13102
ReadX 13102 1909 24 24
ReadX 13102 1892 276 276
ReadX 13102 1889 14 14
ReadX 13102 1889 7 7
ReadX 13102 1891 12 12
ReadX 13102 1890 8 8
ReadX 13102 1888 15 15
Close 13096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13104
WriteX 13104 15 1 1
QUERY_FILE_INFORMATION 13104
WriteX 13104 0 11615 11615
Flush 13104
Close 13104
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Close 13102
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13105
Close 13105
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 13106
QUERY_FILE_INFORMATION 13106
QUERY_FILE_INFORMATION 13106
QUERY_FILE_INFORMATION 13106
ReadX 13106 1947 24 24
ReadX 13106 1929 276 276
ReadX 13106 1927 14 14
ReadX 13106 1927 7 7
ReadX 13106 1929 12 12
ReadX 13106 1928 8 8
ReadX 13106 1926 15 15
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x2 13108
Close 13108
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x2 13110
WriteX 13110 4088 1 1
QUERY_FILE_INFORMATION 13110
WriteX 13110 0 65471 65471
WriteX 13110 65471 65 65
WriteX 13110 65536 16050 16050
Close 13110
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13095 1939 64 64
ReadX 13095 128 248 248
ReadX 13095 128 568 568
ReadX 13095 3872 1536 1536
ReadX 13095 3456 2560 2560
ReadX 13095 3136 512 512
ReadX 13095 2880 4096 4096
ReadX 13095 3264 3072 3072
ReadX 13095 320 4096 4096
ReadX 13095 1024 4096 4096
ReadX 13095 3616 4096 4096
ReadX 13095 1939 64 64
ReadX 13095 128 248 248
ReadX 13095 128 608 608
ReadX 13095 2858 1024 1024
ReadX 13095 2810 4096 4096
ReadX 13095 2826 4096 4096
ReadX 13095 2580 2048 2048
ReadX 13095 2800 2560 2560
ReadX 13095 2100 4096 4096
ReadX 13095 2084 4096 4096
ReadX 13095 868 4096 4096
ReadX 13095 2324 4096 4096
ReadX 13095 884 4096 4096
ReadX 13095 2604 1024 1024
ReadX 13095 580 4096 4096
ReadX 13095 596 4096 4096
ReadX 13095 2752 4096 4096
ReadX 13095 2842 1024 1024
ReadX 13095 660 4096 4096
ReadX 13095 2720 4096 4096
ReadX 13095 2736 4096 4096
ReadX 13095 628 4096 4096
ReadX 13095 2704 4096 4096
ReadX 13095 1556 4096 4096
ReadX 13095 576 4096 4096
ReadX 13095 3168 1536 1536
ReadX 13095 832 4096 4096
ReadX 13095 1088 4096 4096
ReadX 13095 1344 4096 4096
ReadX 13095 1600 4096 4096
ReadX 13095 1856 4096 4096
ReadX 13095 2112 4096 4096
ReadX 13095 1892 4096 4096
ReadX 13095 820 4096 4096
ReadX 13095 788 4096 4096
ReadX 13095 1604 4096 4096
ReadX 13095 3648 4096 4096
ReadX 13095 2608 4096 4096
ReadX 13095 548 4096 4096
ReadX 13095 740 4096 4096
ReadX 13095 1344 4096 4096
ReadX 13095 3392 4096 4096
ReadX 13095 3904 4096 4096
ReadX 13095 644 4096 4096
ReadX 13095 676 4096 4096
ReadX 13095 2688 4096 4096
ReadX 13095 320 4096 4096
ReadX 13095 900 4096 4096
ReadX 13095 1908 4096 4096
ReadX 13095 852 4096 4096
ReadX 13095 724 4096 4096
ReadX 13095 2292 4096 4096
ReadX 13095 612 4096 4096
ReadX 13095 388 4096 4096
ReadX 13095 2368 4096 4096
ReadX 13095 2624 4096 4096
ReadX 13095 500 4096 4096
ReadX 13095 356 4096 4096
ReadX 13095 1024 4096 4096
ReadX 13095 576 4096 4096
ReadX 13095 340 4096 4096
ReadX 13095 420 4096 4096
ReadX 13095 1600 4096 4096
ReadX 13095 404 4096 4096
ReadX 13095 1428 4096 4096
ReadX 13095 2656 4096 4096
ReadX 13095 2624 4096 4096
ReadX 13095 452 4096 4096
ReadX 13095 692 4096 4096
ReadX 13095 564 4096 4096
ReadX 13095 372 4096 4096
ReadX 13095 468 4096 4096
ReadX 13095 484 4096 4096
ReadX 13095 1088 4096 4096
ReadX 13095 1924 4096 4096
ReadX 13095 2768 4096 4096
ReadX 13095 832 4096 4096
ReadX 13095 836 4096 4096
ReadX 13095 1856 4096 4096
ReadX 13095 2640 4096 4096
ReadX 13095 436 4096 4096
ReadX 13095 1828 4096 4096
ReadX 13095 804 4096 4096
ReadX 13095 1860 4096 4096
ReadX 13095 1812 4096 4096
ReadX 13095 756 4096 4096
ReadX 13095 1636 4096 4096
ReadX 13095 772 4096 4096
ReadX 13095 2036 4096 4096
ReadX 13095 1220 4096 4096
ReadX 13095 1652 4096 4096
ReadX 13095 2588 4096 4096
ReadX 13095 916 4096 4096
ReadX 13095 260 4096 4096
ReadX 13095 932 4096 4096
ReadX 13095 2624 4096 4096
ReadX 13095 308 4096 4096
ReadX 13095 292 4096 4096
ReadX 13095 1140 4096 4096
ReadX 13095 276 4096 4096
ReadX 13095 2020 4096 4096
ReadX 13095 2880 4096 4096
ReadX 13095 516 4096 4096
ReadX 13095 1844 4096 4096
ReadX 13095 1124 4096 4096
ReadX 13095 3136 4096 4096
ReadX 13095 324 4096 4096
ReadX 13095 1156 4096 4096
ReadX 13095 1172 4096 4096
ReadX 13095 2112 4096 4096
ReadX 13095 2368 4096 4096
ReadX 13095 964 4096 4096
ReadX 13095 980 4096 4096
ReadX 13095 1012 4096 4096
ReadX 13095 532 4096 4096
ReadX 13095 1876 4096 4096
QUERY_FS_INFORMATION 259
ReadX 13095 1620 4096 4096
ReadX 13095 1604 4096 4096
ReadX 13095 2116 4096 4096
ReadX 13095 2132 4096 4096
ReadX 13095 2148 4096 4096
ReadX 13095 2276 4096 4096
ReadX 13095 1540 4096 4096
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x2 13112
Close 13112
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x2 13114
QUERY_FILE_INFORMATION 13079
WriteX 13114 4088 1 1
QUERY_FILE_INFORMATION 13114
QUERY_FILE_INFORMATION 13079
Close 13079
WriteX 13114 0 65471 65471
WriteX 13114 65471 65 65
WriteX 13114 65536 64850 64850
Close 13114
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13116
WriteX 13116 15 1 1
QUERY_FILE_INFORMATION 13116
ReadX 13095 2068 4096 4096
ReadX 13095 1588 4096 4096
ReadX 13095 1572 4096 4096
WriteX 13116 0 18630 18630
Flush 13116
Close 13116
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Close 13106
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13117
Close 13117
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 13118
QUERY_FILE_INFORMATION 13118
QUERY_FILE_INFORMATION 13118
QUERY_FILE_INFORMATION 13118
ReadX 13118 661 24 24
ReadX 13118 659 356 356
ReadX 13118 659 14 14
ReadX 13118 659 7 7
ReadX 13118 659 12 12
ReadX 13118 659 8 8
ReadX 13118 659 15 15
ReadX 13118 659 16 16
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS
ReadX 13095 612 4096 4096
ReadX 13095 564 4096 4096
ReadX 13095 1876 4096 4096
ReadX 13095 628 4096 4096
ReadX 13095 740 4096 4096
ReadX 13095 724 4096 4096
ReadX 13095 644 4096 4096
ReadX 13095 2324 4096 4096
ReadX 13095 660 4096 4096
ReadX 13095 852 4096 4096
ReadX 13095 868 4096 4096
Close 13118
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS
Close 13093
ReadX 13095 2368 4096 4096
ReadX 13095 1024 4096 4096
ReadX 13095 320 4096 4096
ReadX 13095 580 4096 4096
ReadX 13095 3136 512 512
ReadX 13095 2880 4096 4096
Close 13095
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13119
WriteX 13119 0 65471 65471
WriteX 13119 65471 63 63
WriteX 13119 65534 65471 65471
WriteX 13119 131005 63 63
Close 13119
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13120
WriteX 13120 0 65471 65471
WriteX 13120 65471 63 63
WriteX 13120 65534 65471 65471
WriteX 13120 131005 63 63
WriteX 13120 131068 65471 65471
WriteX 13120 196539 63 63
WriteX 13120 196602 65471 65471
WriteX 13120 262073 63 63
Close 13120
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13121
WriteX 13121 0 65471 65471
WriteX 13121 65471 63 63
WriteX 13121 65534 65471 65471
WriteX 13121 131005 63 63
WriteX 13121 131068 65471 65471
WriteX 13121 196539 63 63
WriteX 13121 196602 65471 65471
WriteX 13121 262073 63 63
WriteX 13121 262136 65471 65471
WriteX 13121 327607 63 63
WriteX 13121 327670 65471 65471
WriteX 13121 393141 63 63
WriteX 13121 393204 65471 65471
WriteX 13121 458675 63 63
WriteX 13121 458738 65471 65471
WriteX 13121 524209 63 63
Close 13121
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13122
Close 13122
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13123
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13123 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13124
ReadX 13124 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13125
ReadX 13125 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13126
ReadX 13126 0 511 511
ReadX 13123 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13123
Close 13124
Close 13125
Close 13126
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13127
ReadX 13127 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13128
ReadX 13128 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13129
ReadX 13129 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13130
ReadX 13130 0 511 511
ReadX 13127 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S3CF99.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.DB 0x40 0x2 13131
FIND_FIRST \clients\client1\~dmtmp\*
Close 13131
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.DB 0x40 0x1 13132
QUERY_FILE_INFORMATION 13132
WriteX 13132 2047 1 1
QUERY_FILE_INFORMATION 13132
WriteX 13132 0 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x2 13133
Close 13133
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x1 13134
WriteX 13134 52 1 1
QUERY_FILE_INFORMATION 13134
WriteX 13134 0 53 53
WriteX 13134 53 28 28
WriteX 13134 81 4 4
WriteX 13134 85 28 28
WriteX 13134 113 38 38
WriteX 13134 151 28 28
WriteX 13134 179 2 2
WriteX 13134 181 28 28
WriteX 13134 209 3 3
WriteX 13134 212 279 279
WriteX 13134 9 4 4
Close 13134
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x1 13135
ReadX 13135 0 53 53
ReadX 13135 53 28 28
ReadX 13135 81 4 4
ReadX 13135 85 28 28
ReadX 13135 113 38 38
ReadX 13135 151 28 28
ReadX 13135 179 2 2
ReadX 13135 181 28 28
ReadX 13135 209 3 3
Close 13135
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
Close 13127
Close 13128
Close 13129
Close 13130
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13136
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13136 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13137
ReadX 13137 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13138
ReadX 13138 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13139
ReadX 13139 0 511 511
ReadX 13136 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x2 13141
Close 13141
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13142
WriteX 13142 52 1 1
QUERY_FILE_INFORMATION 13142
WriteX 13142 0 53 53
WriteX 13142 53 28 28
WriteX 13142 81 28 28
WriteX 13142 109 28 28
WriteX 13142 137 28 28
WriteX 13142 165 28 28
WriteX 13142 193 28 28
WriteX 13142 221 28 28
WriteX 13142 249 4 4
WriteX 13142 253 4 4
WriteX 13142 257 4 4
WriteX 13142 261 28 28
WriteX 13142 289 2 2
WriteX 13142 291 2 2
WriteX 13142 293 2 2
WriteX 13142 295 248 248
WriteX 13142 9 4 4
Close 13142
Close 13136
Close 13137
Close 13138
Close 13139
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13143
ReadX 13143 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13144
ReadX 13144 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13145
ReadX 13145 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13146
ReadX 13146 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13147
ReadX 13147 0 53 53
ReadX 13147 53 28 28
ReadX 13147 81 28 28
ReadX 13147 109 28 28
ReadX 13147 137 28 28
ReadX 13147 165 28 28
ReadX 13147 193 28 28
ReadX 13147 221 28 28
ReadX 13147 249 4 4
ReadX 13147 253 4 4
ReadX 13147 257 4 4
ReadX 13147 261 28 28
ReadX 13147 289 2 2
ReadX 13147 291 2 2
ReadX 13147 293 2 2
Close 13147
ReadX 13143 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13143
Close 13144
Close 13145
Close 13146
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.VAL
Unlink \clients\client1\~dmtmp\PARADOX\__S31.VAL
Close 13132
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
Unlink \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13148
Close 13148
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13149
ReadX 13149 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13150
ReadX 13150 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13151
ReadX 13151 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13152
ReadX 13152 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13153
ReadX 13153 0 53 53
ReadX 13153 53 28 28
ReadX 13153 81 28 28
ReadX 13153 109 28 28
ReadX 13153 137 28 28
ReadX 13153 165 28 28
ReadX 13153 193 28 28
ReadX 13153 221 28 28
ReadX 13153 249 4 4
ReadX 13153 253 4 4
ReadX 13153 257 4 4
ReadX 13153 261 28 28
ReadX 13153 289 2 2
ReadX 13153 291 2 2
ReadX 13153 293 2 2
Close 13153
ReadX 13149 2048 2048 2048
Close 13149
Close 13150
Close 13151
Close 13152
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13154
ReadX 13154 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13155
ReadX 13155 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13156
ReadX 13156 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13157
ReadX 13157 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13158
ReadX 13158 0 53 53
ReadX 13158 53 28 28
ReadX 13158 81 28 28
ReadX 13158 109 28 28
ReadX 13158 137 28 28
ReadX 13158 165 28 28
ReadX 13158 193 28 28
ReadX 13158 221 28 28
ReadX 13158 249 4 4
ReadX 13158 253 4 4
ReadX 13158 257 4 4
ReadX 13158 261 28 28
ReadX 13158 289 2 2
ReadX 13158 291 2 2
ReadX 13158 293 2 2
Close 13158
ReadX 13154 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x2 13162
FIND_FIRST \clients\client1\~dmtmp\*
Close 13162
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 13163
QUERY_FILE_INFORMATION 13163
WriteX 13163 2047 1 1
QUERY_FILE_INFORMATION 13163
WriteX 13163 0 2048 2048
Close 13163
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 13164
ReadX 13164 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
Close 13164
Close 13154
Close 13155
Close 13156
Close 13157
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 13165
ReadX 13165 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
WriteX 13165 4095 1 1
QUERY_FILE_INFORMATION 13165
WriteX 13165 2048 2048 2048
QUERY_FILE_INFORMATION 13165
Flush 13165
WriteX 13165 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13166
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13166 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13167
ReadX 13167 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13168
ReadX 13168 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13169
ReadX 13169 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13170
ReadX 13170 0 53 53
ReadX 13170 53 28 28
ReadX 13170 81 28 28
ReadX 13170 109 28 28
ReadX 13170 137 28 28
ReadX 13170 165 28 28
ReadX 13170 193 28 28
ReadX 13170 221 28 28
ReadX 13170 249 4 4
ReadX 13170 253 4 4
ReadX 13170 257 4 4
ReadX 13170 261 28 28
ReadX 13170 289 2 2
ReadX 13170 291 2 2
ReadX 13170 293 2 2
Close 13170
ReadX 13166 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x2 13174
FIND_FIRST \clients\client1\~dmtmp\*
Close 13174
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 13175
QUERY_FILE_INFORMATION 13175
WriteX 13175 2047 1 1
QUERY_FILE_INFORMATION 13175
WriteX 13175 0 2048 2048
Close 13175
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 13176
ReadX 13176 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x2 13180
Close 13180
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 13181
QUERY_FILE_INFORMATION 13181
WriteX 13181 2047 1 1
QUERY_FILE_INFORMATION 13181
WriteX 13181 0 2048 2048
Close 13181
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 13182
ReadX 13182 0 511 511
ReadX 13166 384 2048 2048
ReadX 13166 768 16384 16384
ReadX 13166 1792 14336 14336
Close 13182
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 13183
ReadX 13183 0 511 511
Close 13183
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 13185
Close 13185
Unlink \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB
WriteX 13176 4095 1 1
QUERY_FILE_INFORMATION 13176
WriteX 13176 2048 2048 2048
WriteX 13176 0 88 88
Close 13176
WriteX 13166 1152 2048 2048
WriteX 13166 1408 6144 6144
WriteX 13166 1920 2048 2048
WriteX 13166 0 88 88
Close 13166
WriteX 13167 0 88 88
Close 13167
WriteX 13168 0 88 88
Close 13168
Close 13169
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 13186
ReadX 13186 0 511 511
ReadX 13186 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\CHANGED.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13186
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\TIMECHG 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\TIMECHG 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13187
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13187 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13188
ReadX 13188 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13189
ReadX 13189 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13190
ReadX 13190 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13191
ReadX 13191 0 53 53
ReadX 13191 53 28 28
ReadX 13191 81 28 28
ReadX 13191 109 28 28
ReadX 13191 137 28 28
ReadX 13191 165 28 28
ReadX 13191 193 28 28
ReadX 13191 221 28 28
ReadX 13191 249 4 4
ReadX 13191 253 4 4
ReadX 13191 257 4 4
ReadX 13191 261 28 28
ReadX 13191 289 2 2
ReadX 13191 291 2 2
ReadX 13191 293 2 2
Close 13191
ReadX 13187 2048 2048 2048
Close 13187
Close 13188
Close 13189
Close 13190
Close 13165
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 13192
QUERY_FILE_INFORMATION 13192
Close 13192
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
Unlink \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13193
Close 13193
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13194
ReadX 13194 0 511 511
ReadX 13194 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13195
ReadX 13195 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13196
ReadX 13196 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13197
ReadX 13197 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13198
ReadX 13198 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13199
ReadX 13199 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13200
ReadX 13200 0 53 53
ReadX 13200 53 2 2
ReadX 13200 55 2 2
ReadX 13200 57 184 184
ReadX 13200 241 298 298
Close 13200
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13201
ReadX 13201 0 41 41
ReadX 13194 2048 2048 2048
Close 13201
Close 13194
Close 13195
Close 13198
Close 13199
Close 13196
Close 13197
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13202
ReadX 13202 0 511 511
ReadX 13202 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13203
ReadX 13203 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13204
ReadX 13204 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13205
ReadX 13205 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13206
ReadX 13206 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13207
ReadX 13207 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13208
ReadX 13208 0 53 53
ReadX 13208 53 2 2
ReadX 13208 55 2 2
ReadX 13208 57 184 184
ReadX 13208 241 298 298
Close 13208
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13209
ReadX 13209 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13210
ReadX 13210 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13211
ReadX 13211 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13212
ReadX 13212 0 511 511
ReadX 13211 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13213
ReadX 13213 0 53 53
ReadX 13213 53 2 2
ReadX 13213 55 480 480
ReadX 13213 535 2 2
Close 13213
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13214
ReadX 13214 0 41 41
ReadX 13202 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x2 13218
FIND_FIRST \clients\client1\~dmtmp\*
Close 13218
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 13219
QUERY_FILE_INFORMATION 13219
WriteX 13219 2047 1 1
QUERY_FILE_INFORMATION 13219
WriteX 13219 0 2048 2048
Close 13219
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 13220
ReadX 13220 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Close 13220
Close 13209
Close 13210
Close 13211
Close 13212
Close 13214
Close 13202
Close 13203
Close 13206
Close 13207
Close 13204
Close 13205
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 13221
ReadX 13221 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13222
Close 13222
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13223
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13223 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13224
ReadX 13224 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13225
ReadX 13225 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13226
ReadX 13226 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13227
ReadX 13227 0 53 53
ReadX 13227 53 2 2
ReadX 13227 55 480 480
ReadX 13227 535 2 2
Close 13227
ReadX 13223 2048 2048 2048
Close 13223
Close 13224
Close 13225
Close 13226
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13228
ReadX 13228 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13229
ReadX 13229 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13230
ReadX 13230 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13231
ReadX 13231 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13232
ReadX 13232 0 53 53
ReadX 13232 53 2 2
ReadX 13232 55 480 480
ReadX 13232 535 2 2
Close 13232
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13233
ReadX 13233 0 511 511
ReadX 13233 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13234
ReadX 13234 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13235
ReadX 13235 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13236
ReadX 13236 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13237
ReadX 13237 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13238
ReadX 13238 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13239
ReadX 13239 0 41 41
ReadX 13233 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13240
ReadX 13240 0 53 53
ReadX 13240 53 2 2
ReadX 13240 55 2 2
ReadX 13240 57 184 184
ReadX 13240 241 298 298
Close 13240
ReadX 13228 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x2 13244
FIND_FIRST \clients\client1\~dmtmp\*
Close 13244
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 13245
QUERY_FILE_INFORMATION 13245
WriteX 13245 2047 1 1
QUERY_FILE_INFORMATION 13245
WriteX 13245 0 2048 2048
Close 13245
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 13246
ReadX 13246 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
Close 13246
Close 13239
Close 13233
Close 13234
Close 13237
Close 13238
Close 13235
Close 13236
Close 13228
Close 13229
Close 13230
Close 13231
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 13247
ReadX 13247 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
WriteX 13221 4095 1 1
QUERY_FILE_INFORMATION 13221
WriteX 13221 2048 2048 2048
QUERY_FILE_INFORMATION 13221
Flush 13221
WriteX 13221 0 88 88
WriteX 13247 4095 1 1
QUERY_FILE_INFORMATION 13247
WriteX 13247 2048 2048 2048
QUERY_FILE_INFORMATION 13247
Flush 13247
WriteX 13247 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13248
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13248 0 511 511
ReadX 13248 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13249
ReadX 13249 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13250
ReadX 13250 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13251
ReadX 13251 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13252
ReadX 13252 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13253
ReadX 13253 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13254
ReadX 13254 0 53 53
ReadX 13254 53 2 2
ReadX 13254 55 2 2
ReadX 13254 57 184 184
ReadX 13254 241 298 298
Close 13254
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13255
ReadX 13255 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13256
ReadX 13256 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13257
ReadX 13257 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13258
ReadX 13258 0 511 511
ReadX 13257 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13259
ReadX 13259 0 53 53
ReadX 13259 53 2 2
ReadX 13259 55 480 480
ReadX 13259 535 2 2
Close 13259
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13260
ReadX 13260 0 41 41
ReadX 13248 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13261
ReadX 13261 0 53 53
ReadX 13261 53 2 2
ReadX 13261 55 480 480
ReadX 13261 535 2 2
Close 13261
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13262
ReadX 13262 0 53 53
ReadX 13262 53 2 2
ReadX 13262 55 2 2
ReadX 13262 57 184 184
ReadX 13262 241 298 298
Close 13262
ReadX 13255 2048 2048 2048
ReadX 13256 2048 2048 2048
ReadX 13255 320 16384 16384
ReadX 13255 384 16384 16384
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x2 13263
FIND_FIRST \clients\client1\~dmtmp\*
Close 13263
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x1 13264
QUERY_FILE_INFORMATION 13264
WriteX 13264 4095 1 1
QUERY_FILE_INFORMATION 13264
WriteX 13264 0 4096 4096
Close 13264
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x1 13265
ReadX 13265 0 41 41
Close 13255
Close 13256
Close 13257
Close 13258
Close 13260
Close 13248
Close 13249
Close 13252
Close 13253
Close 13250
Close 13251
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x2 13266
Close 13266
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 13267
QUERY_FILE_INFORMATION 13267
WriteX 13267 4095 1 1
QUERY_FILE_INFORMATION 13267
WriteX 13267 0 4096 4096
Close 13267
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 13268
ReadX 13268 0 41 41
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.FAM 0x40 0x1 -1
QUERY_FILE_INFORMATION 13265
ReadX 13265 0 4096 4096
WriteX 13268 0 4096 4096
Close 13268
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 13270
ReadX 13270 0 41 41
Close 13265
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__QB4.MB
Unlink \clients\client1\~dmtmp\PARADOX\__QB4.MB
Close 13270
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__QB5.MB
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x200000 0x1 13271
Close 13271
Rename \clients\client1\~dmtmp\PARADOX\__QB5.MB \clients\client1\~dmtmp\PARADOX\ANSWER.MB
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.MB 0x40 0x1 13272
ReadX 13272 0 41 41
Close 13272
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x2 13273
Close 13273
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13274
QUERY_FILE_INFORMATION 13274
WriteX 13274 2047 1 1
QUERY_FILE_INFORMATION 13274
WriteX 13274 0 2048 2048
Close 13274
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13275
ReadX 13275 0 511 511
ReadX 13275 0 572 572
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.MB 0x40 0x1 13276
ReadX 13276 0 41 41
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13276
Close 13275
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\CLASSROL 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13277
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13277 0 511 511
ReadX 13277 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13278
ReadX 13278 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13279
ReadX 13279 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13280
ReadX 13280 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13281
ReadX 13281 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13282
ReadX 13282 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13283
ReadX 13283 0 53 53
ReadX 13283 53 2 2
ReadX 13283 55 2 2
ReadX 13283 57 184 184
ReadX 13283 241 298 298
Close 13283
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13284
ReadX 13284 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13285
ReadX 13285 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13286
ReadX 13286 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13287
ReadX 13287 0 511 511
ReadX 13286 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13288
ReadX 13288 0 53 53
ReadX 13288 53 2 2
ReadX 13288 55 480 480
ReadX 13288 535 2 2
Close 13288
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13289
ReadX 13289 0 41 41
ReadX 13277 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13290
ReadX 13290 0 53 53
ReadX 13290 53 2 2
ReadX 13290 55 480 480
ReadX 13290 535 2 2
Close 13290
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13291
ReadX 13291 0 53 53
ReadX 13291 53 2 2
ReadX 13291 55 2 2
ReadX 13291 57 184 184
ReadX 13291 241 298 298
Close 13291
ReadX 13284 2048 2048 2048
Close 13284
Close 13285
Close 13286
Close 13287
Close 13289
Close 13277
Close 13278
Close 13281
Close 13282
Close 13279
Close 13280
Close 13221
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 13292
QUERY_FILE_INFORMATION 13292
Close 13292
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Unlink \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Close 13247
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 13293
QUERY_FILE_INFORMATION 13293
Close 13293
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
Unlink \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13294
Close 13294
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13295
ReadX 13295 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13296
ReadX 13296 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13297
ReadX 13297 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13298
ReadX 13298 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13299
ReadX 13299 0 53 53
ReadX 13299 53 2 2
ReadX 13299 55 480 480
ReadX 13299 535 2 2
Close 13299
ReadX 13295 2048 2048 2048
Close 13295
Close 13296
Close 13297
Close 13298
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13300
ReadX 13300 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13301
ReadX 13301 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13302
ReadX 13302 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13303
ReadX 13303 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13304
ReadX 13304 0 53 53
ReadX 13304 53 2 2
ReadX 13304 55 480 480
ReadX 13304 535 2 2
Close 13304
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13305
ReadX 13305 0 511 511
ReadX 13305 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13306
ReadX 13306 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13307
ReadX 13307 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13308
ReadX 13308 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13309
ReadX 13309 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13310
ReadX 13310 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13311
ReadX 13311 0 41 41
ReadX 13305 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13312
ReadX 13312 0 53 53
ReadX 13312 53 2 2
ReadX 13312 55 2 2
ReadX 13312 57 184 184
ReadX 13312 241 298 298
Close 13312
ReadX 13300 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x2 13316
FIND_FIRST \clients\client1\~dmtmp\*
Close 13316
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 13317
QUERY_FILE_INFORMATION 13317
WriteX 13317 2047 1 1
QUERY_FILE_INFORMATION 13317
WriteX 13317 0 2048 2048
Close 13317
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 13318
ReadX 13318 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
Close 13318
Close 13311
Close 13305
Close 13306
Close 13309
Close 13310
Close 13307
Close 13308
Close 13300
Close 13301
Close 13302
Close 13303
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 13319
ReadX 13319 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13320
Close 13320
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13321
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13321 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13322
ReadX 13322 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13323
ReadX 13323 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13324
ReadX 13324 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13325
ReadX 13325 0 53 53
ReadX 13325 53 28 28
ReadX 13325 81 28 28
ReadX 13325 109 28 28
ReadX 13325 137 28 28
ReadX 13325 165 28 28
ReadX 13325 193 28 28
ReadX 13325 221 28 28
ReadX 13325 249 4 4
ReadX 13325 253 4 4
ReadX 13325 257 4 4
ReadX 13325 261 28 28
ReadX 13325 289 2 2
ReadX 13325 291 2 2
ReadX 13325 293 2 2
Close 13325
ReadX 13321 2048 2048 2048
Close 13321
Close 13322
Close 13323
Close 13324
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13326
ReadX 13326 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13327
ReadX 13327 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13328
ReadX 13328 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13329
ReadX 13329 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13330
ReadX 13330 0 53 53
ReadX 13330 53 28 28
ReadX 13330 81 28 28
ReadX 13330 109 28 28
ReadX 13330 137 28 28
ReadX 13330 165 28 28
ReadX 13330 193 28 28
ReadX 13330 221 28 28
ReadX 13330 249 4 4
ReadX 13330 253 4 4
ReadX 13330 257 4 4
ReadX 13330 261 28 28
ReadX 13330 289 2 2
ReadX 13330 291 2 2
ReadX 13330 293 2 2
Close 13330
ReadX 13326 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x2 13334
FIND_FIRST \clients\client1\~dmtmp\*
Close 13334
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 13335
QUERY_FILE_INFORMATION 13335
WriteX 13335 2047 1 1
QUERY_FILE_INFORMATION 13335
WriteX 13335 0 2048 2048
Close 13335
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 13336
ReadX 13336 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
Close 13336
Close 13326
Close 13327
Close 13328
Close 13329
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 13337
ReadX 13337 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13338
Close 13338
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13339
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13339 0 511 511
ReadX 13339 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13340
ReadX 13340 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13341
ReadX 13341 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13342
ReadX 13342 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13343
ReadX 13343 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13344
ReadX 13344 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13345
ReadX 13345 0 53 53
ReadX 13345 53 2 2
ReadX 13345 55 2 2
ReadX 13345 57 184 184
ReadX 13345 241 298 298
Close 13345
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13346
ReadX 13346 0 41 41
ReadX 13339 2048 2048 2048
Close 13346
Close 13339
Close 13340
Close 13343
Close 13344
Close 13341
Close 13342
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13347
ReadX 13347 0 511 511
ReadX 13347 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13348
ReadX 13348 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13349
ReadX 13349 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13350
ReadX 13350 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13351
ReadX 13351 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13352
ReadX 13352 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13353
ReadX 13353 0 53 53
ReadX 13353 53 2 2
ReadX 13353 55 2 2
ReadX 13353 57 184 184
ReadX 13353 241 298 298
Close 13353
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13354
ReadX 13354 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13355
ReadX 13355 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13356
ReadX 13356 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13357
ReadX 13357 0 511 511
ReadX 13356 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13358
ReadX 13358 0 53 53
ReadX 13358 53 2 2
ReadX 13358 55 480 480
ReadX 13358 535 2 2
Close 13358
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13359
ReadX 13359 0 41 41
ReadX 13347 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x2 13363
FIND_FIRST \clients\client1\~dmtmp\*
Close 13363
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 13364
QUERY_FILE_INFORMATION 13364
WriteX 13364 2047 1 1
QUERY_FILE_INFORMATION 13364
WriteX 13364 0 2048 2048
Close 13364
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 13365
ReadX 13365 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
Close 13365
Close 13354
Close 13355
Close 13356
Close 13357
Close 13359
Close 13347
Close 13348
Close 13351
Close 13352
Close 13349
Close 13350
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 13366
ReadX 13366 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
WriteX 13319 4095 1 1
QUERY_FILE_INFORMATION 13319
WriteX 13319 2048 2048 2048
QUERY_FILE_INFORMATION 13319
Flush 13319
WriteX 13319 0 88 88
WriteX 13337 4095 1 1
QUERY_FILE_INFORMATION 13337
WriteX 13337 2048 2048 2048
QUERY_FILE_INFORMATION 13337
Flush 13337
WriteX 13337 0 88 88
WriteX 13366 4095 1 1
QUERY_FILE_INFORMATION 13366
WriteX 13366 2048 2048 2048
QUERY_FILE_INFORMATION 13366
Flush 13366
WriteX 13366 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13367
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13367 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13368
ReadX 13368 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13369
ReadX 13369 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13370
ReadX 13370 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13371
ReadX 13371 0 53 53
ReadX 13371 53 2 2
ReadX 13371 55 480 480
ReadX 13371 535 2 2
Close 13371
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13372
ReadX 13372 0 511 511
ReadX 13372 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13373
ReadX 13373 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13374
ReadX 13374 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13375
ReadX 13375 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13376
ReadX 13376 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13377
ReadX 13377 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13378
ReadX 13378 0 41 41
ReadX 13372 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13379
ReadX 13379 0 53 53
ReadX 13379 53 2 2
ReadX 13379 55 2 2
ReadX 13379 57 184 184
ReadX 13379 241 298 298
Close 13379
ReadX 13367 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13380
ReadX 13380 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13381
ReadX 13381 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13382
ReadX 13382 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13383
ReadX 13383 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13384
ReadX 13384 0 53 53
ReadX 13384 53 28 28
ReadX 13384 81 28 28
ReadX 13384 109 28 28
ReadX 13384 137 28 28
ReadX 13384 165 28 28
ReadX 13384 193 28 28
ReadX 13384 221 28 28
ReadX 13384 249 4 4
ReadX 13384 253 4 4
ReadX 13384 257 4 4
ReadX 13384 261 28 28
ReadX 13384 289 2 2
ReadX 13384 291 2 2
ReadX 13384 293 2 2
Close 13384
ReadX 13380 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13385
ReadX 13385 0 53 53
ReadX 13385 53 2 2
ReadX 13385 55 2 2
ReadX 13385 57 184 184
ReadX 13385 241 298 298
Close 13385
ReadX 13369 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13386
ReadX 13386 0 53 53
ReadX 13386 53 2 2
ReadX 13386 55 480 480
ReadX 13386 535 2 2
Close 13386
ReadX 13380 4096 16384 16384
ReadX 13380 1280 16384 16384
ReadX 13380 2304 6144 6144
ReadX 13380 2688 2048 2048
ReadX 13367 4096 16384 16384
ReadX 13367 1280 16384 16384
ReadX 13367 2304 16384 16384
ReadX 13367 3328 16384 16384
ReadX 13367 272 16384 16384
ReadX 13367 336 16384 16384
ReadX 13367 400 16384 16384
ReadX 13367 464 16384 16384
ReadX 13367 528 16384 16384
ReadX 13367 592 16384 16384
ReadX 13367 656 16384 16384
ReadX 13367 720 16384 16384
ReadX 13367 784 16384 16384
ReadX 13367 848 16384 16384
ReadX 13367 912 16384 16384
ReadX 13373 2048 2048 2048
ReadX 13372 760 2048 2048
ReadX 13372 1144 2048 2048
ReadX 13372 408 2048 2048
ReadX 13372 912 2048 2048
ReadX 13372 1096 2048 2048
ReadX 13372 776 2048 2048
ReadX 13372 560 2048 2048
ReadX 13372 376 2048 2048
ReadX 13372 320 2048 2048
ReadX 13372 3072 2048 2048
ReadX 13372 784 2048 2048
ReadX 13372 2176 2048 2048
ReadX 13372 792 2048 2048
ReadX 13372 576 2048 2048
ReadX 13372 600 2048 2048
ReadX 13372 728 2048 2048
ReadX 13372 1112 2048 2048
ReadX 13372 664 2048 2048
ReadX 13372 976 2048 2048
ReadX 13372 3840 2048 2048
ReadX 13372 296 2048 2048
ReadX 13372 480 2048 2048
ReadX 13372 680 2048 2048
ReadX 13372 696 2048 2048
ReadX 13372 832 2048 2048
ReadX 13372 1016 2048 2048
ReadX 13372 1104 2048 2048
ReadX 13372 3200 2048 2048
ReadX 13372 264 2048 2048
ReadX 13372 448 2048 2048
ReadX 13372 648 2048 2048
ReadX 13372 1136 2048 2048
ReadX 13372 288 2048 2048
ReadX 13372 352 2048 2048
ReadX 13372 536 2048 2048
ReadX 13372 800 2048 2048
ReadX 13372 736 2048 2048
ReadX 13372 392 2048 2048
ReadX 13372 752 2048 2048
ReadX 13372 880 2048 2048
ReadX 13372 1064 2048 2048
ReadX 13372 1128 2048 2048
ReadX 13372 1536 2048 2048
ReadX 13372 2432 2048 2048
ReadX 13372 688 2048 2048
ReadX 13372 872 2048 2048
ReadX 13372 1072 2048 2048
ReadX 13372 984 2048 2048
ReadX 13372 704 2048 2048
ReadX 13372 3328 2048 2048
ReadX 13372 888 2048 2048
ReadX 13372 496 2048 2048
ReadX 13372 624 2048 2048
ReadX 13372 808 2048 2048
ReadX 13372 1008 2048 2048
ReadX 13372 1152 2048 2048
ReadX 13372 416 2048 2048
ReadX 13372 584 2048 2048
ReadX 13372 384 2048 2048
ReadX 13372 568 2048 2048
ReadX 13372 512 2048 2048
ReadX 13372 1408 2048 2048
ReadX 13372 472 2048 2048
ReadX 13372 672 2048 2048
ReadX 13372 2560 2048 2048
ReadX 13372 544 2048 2048
ReadX 13372 920 2048 2048
ReadX 13372 1120 2048 2048
ReadX 13372 2304 2048 2048
ReadX 13372 1080 2048 2048
ReadX 13372 1664 2048 2048
ReadX 13372 608 2048 2048
ReadX 13372 2688 2048 2048
ReadX 13372 3712 2048 2048
ReadX 13372 616 2048 2048
ReadX 13372 632 2048 2048
ReadX 13372 944 2048 2048
ReadX 13372 856 2048 2048
ReadX 13372 768 2048 2048
ReadX 13372 720 2048 2048
ReadX 13372 640 2048 2048
ReadX 13372 1048 2048 2048
ReadX 13372 1040 2048 2048
ReadX 13372 1032 2048 2048
ReadX 13372 1000 2048 2048
ReadX 13372 992 2048 2048
ReadX 13372 968 2048 2048
ReadX 13372 952 2048 2048
ReadX 13372 1056 2048 2048
ReadX 13372 816 2048 2048
ReadX 13372 864 2048 2048
ReadX 13372 2816 2048 2048
ReadX 13372 640 2048 2048
ReadX 13372 1024 2048 2048
ReadX 13372 504 2048 2048
ReadX 13372 424 2048 2048
ReadX 13372 840 2048 2048
ReadX 13372 896 2048 2048
ReadX 13372 520 2048 2048
ReadX 13372 960 2048 2048
ReadX 13372 552 2048 2048
ReadX 13372 488 2048 2048
ReadX 13372 824 2048 2048
ReadX 13372 304 2048 2048
ReadX 13372 768 2048 2048
ReadX 13372 712 2048 2048
ReadX 13372 512 2048 2048
ReadX 13372 432 2048 2048
ReadX 13372 384 2048 2048
ReadX 13372 2944 2048 2048
ReadX 13372 1088 2048 2048
ReadX 13372 928 2048 2048
ReadX 13372 280 2048 2048
ReadX 13372 744 2048 2048
ReadX 13372 3968 2048 2048
ReadX 13372 336 2048 2048
ReadX 13372 592 2048 2048
ReadX 13372 312 2048 2048
ReadX 13372 400 2048 2048
ReadX 13372 904 2048 2048
ReadX 13372 464 2048 2048
ReadX 13372 3456 2048 2048
ReadX 13372 848 2048 2048
ReadX 13372 936 2048 2048
ReadX 13372 656 2048 2048
ReadX 13372 344 2048 2048
ReadX 13372 440 2048 2048
ReadX 13372 4096 2048 2048
ReadX 13372 528 2048 2048
ReadX 13372 2048 2048 2048
ReadX 13372 1024 2048 2048
ReadX 13372 456 2048 2048
ReadX 13372 1792 2048 2048
ReadX 13372 1152 2048 2048
ReadX 13372 3584 2048 2048
ReadX 13372 1920 2048 2048
ReadX 13372 1280 2048 2048
ReadX 13372 896 2048 2048
ReadX 13372 328 2048 2048
Close 13380
Close 13381
Close 13382
Close 13383
Close 13378
Close 13372
Close 13373
Close 13376
Close 13377
Close 13374
Close 13375
Close 13367
Close 13368
Close 13369
Close 13370
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13387
FIND_FIRST \clients\client1\~dmtmp\*
Close 13387
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13388
QUERY_FILE_INFORMATION 13388
WriteX 13388 0 2048 2048
WriteX 13388 18431 1 1
QUERY_FILE_INFORMATION 13388
WriteX 13388 2048 16384 16384
WriteX 13388 1152 16384 16384
WriteX 13388 2176 16384 16384
WriteX 13388 3200 16384 16384
WriteX 13388 264 16384 16384
WriteX 13388 328 16384 16384
WriteX 13388 392 16384 16384
WriteX 13388 456 16384 16384
WriteX 13388 520 16384 16384
WriteX 13388 584 16384 16384
WriteX 13388 648 16384 16384
WriteX 13388 712 16384 16384
WriteX 13388 776 16384 16384
WriteX 13388 840 16384 16384
WriteX 13388 904 16384 16384
WriteX 13388 968 16384 16384
WriteX 13388 1032 16384 16384
WriteX 13388 1096 16384 16384
WriteX 13388 1160 16384 16384
WriteX 13388 1224 16384 16384
WriteX 13388 1288 16384 16384
WriteX 13388 1352 16384 16384
WriteX 13388 1416 16384 16384
WriteX 13388 1480 16384 16384
WriteX 13388 1544 16384 16384
WriteX 13388 1608 16384 16384
WriteX 13388 1672 16384 16384
WriteX 13388 1736 16384 16384
WriteX 13388 1800 16384 16384
WriteX 13388 1864 16384 16384
WriteX 13388 1928 16384 16384
WriteX 13388 1992 16384 16384
WriteX 13388 2056 16384 16384
WriteX 13388 2120 16384 16384
WriteX 13388 2184 16384 16384
WriteX 13388 2248 16384 16384
WriteX 13388 2312 16384 16384
WriteX 13388 2376 16384 16384
WriteX 13388 2440 16384 16384
WriteX 13388 0 88 88
Close 13388
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13389
ReadX 13389 0 511 511
ReadX 13389 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13389
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\SCHED 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\SCHED 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13390
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13390 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13391
ReadX 13391 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13392
ReadX 13392 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13393
ReadX 13393 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13394
ReadX 13394 0 53 53
ReadX 13394 53 2 2
ReadX 13394 55 480 480
ReadX 13394 535 2 2
Close 13394
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13395
ReadX 13395 0 511 511
ReadX 13395 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13396
ReadX 13396 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13397
ReadX 13397 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13398
ReadX 13398 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13399
ReadX 13399 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13400
ReadX 13400 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13401
ReadX 13401 0 41 41
ReadX 13395 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13402
ReadX 13402 0 53 53
ReadX 13402 53 2 2
ReadX 13402 55 2 2
ReadX 13402 57 184 184
ReadX 13402 241 298 298
Close 13402
ReadX 13390 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13403
ReadX 13403 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13404
ReadX 13404 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13405
ReadX 13405 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13406
ReadX 13406 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13407
ReadX 13407 0 53 53
ReadX 13407 53 28 28
ReadX 13407 81 28 28
ReadX 13407 109 28 28
ReadX 13407 137 28 28
ReadX 13407 165 28 28
ReadX 13407 193 28 28
ReadX 13407 221 28 28
ReadX 13407 249 4 4
ReadX 13407 253 4 4
ReadX 13407 257 4 4
ReadX 13407 261 28 28
ReadX 13407 289 2 2
ReadX 13407 291 2 2
ReadX 13407 293 2 2
Close 13407
ReadX 13403 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13408
ReadX 13408 0 53 53
ReadX 13408 53 2 2
ReadX 13408 55 2 2
ReadX 13408 57 184 184
ReadX 13408 241 298 298
Close 13408
ReadX 13392 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13409
ReadX 13409 0 53 53
ReadX 13409 53 2 2
ReadX 13409 55 480 480
ReadX 13409 535 2 2
Close 13409
Close 13403
Close 13404
Close 13405
Close 13406
Close 13401
Close 13395
Close 13396
Close 13399
Close 13400
Close 13397
Close 13398
Close 13390
Close 13391
Close 13392
Close 13393
Close 13319
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 13410
QUERY_FILE_INFORMATION 13410
Close 13410
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
Unlink \clients\client1\~dmtmp\PARADOX\__42B96.DB
Close 13337
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 13411
QUERY_FILE_INFORMATION 13411
Close 13411
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
Unlink \clients\client1\~dmtmp\PARADOX\__43212.DB
Close 13366
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 13412
QUERY_FILE_INFORMATION 13412
Close 13412
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
Unlink \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13413
Close 13413
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13414
ReadX 13414 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13415
ReadX 13415 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13416
ReadX 13416 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13417
ReadX 13417 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13418
ReadX 13418 0 53 53
ReadX 13418 53 28 28
ReadX 13418 81 28 28
ReadX 13418 109 28 28
ReadX 13418 137 28 28
ReadX 13418 165 28 28
ReadX 13418 193 28 28
ReadX 13418 221 28 28
ReadX 13418 249 4 4
ReadX 13418 253 4 4
ReadX 13418 257 4 4
ReadX 13418 261 28 28
ReadX 13418 289 2 2
ReadX 13418 291 2 2
ReadX 13418 293 2 2
Close 13418
ReadX 13414 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
ReadX 13414 384 2048 2048
ReadX 13414 768 16384 16384
ReadX 13414 1792 14336 14336
ReadX 13417 2048 2048 2048
ReadX 13416 2048 2048 2048
WriteX 13414 1152 2048 2048
WriteX 13417 2048 2048 2048
WriteX 13416 2048 2048 2048
WriteX 13414 0 88 88
WriteX 13415 0 88 88
WriteX 13416 0 88 88
WriteX 13417 0 88 88
Close 13414
Close 13415
Close 13416
Close 13417
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13419
Close 13419
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13420
ReadX 13420 0 511 511
ReadX 13420 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13421
ReadX 13421 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13422
ReadX 13422 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13423
ReadX 13423 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13424
ReadX 13424 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13425
ReadX 13425 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13426
ReadX 13426 0 53 53
ReadX 13426 53 2 2
ReadX 13426 55 2 2
ReadX 13426 57 184 184
ReadX 13426 241 298 298
Close 13426
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13427
ReadX 13427 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13428
ReadX 13428 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13429
ReadX 13429 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13430
ReadX 13430 0 511 511
ReadX 13429 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13431
ReadX 13431 0 53 53
ReadX 13431 53 2 2
ReadX 13431 55 480 480
ReadX 13431 535 2 2
Close 13431
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13432
ReadX 13432 0 41 41
ReadX 13420 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.TV
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.TV 0x40 0x1 13433
QUERY_FILE_INFORMATION 13433
QUERY_FILE_INFORMATION 13433
ReadX 13433 0 8192 8192
Close 13433
ReadX 13420 1152 2048 2048
ReadX 13420 4096 16384 16384
Close 13427
Close 13428
Close 13429
Close 13430
Close 13432
Close 13420
Close 13421
Close 13424
Close 13425
Close 13422
Close 13423
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\PXTOOLS.FT 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 13434
Close 13434
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 13435
QUERY_FILE_INFORMATION 13435
ReadX 13435 0 64 64
ReadX 13435 144 64 64
ReadX 13435 224 156 156
ReadX 13435 1193 128 128
ReadX 13435 1201 128 128
ReadX 13435 1072 4 4
ReadX 13435 1076 1925 1925
ReadX 13435 758 4 4
ReadX 13435 762 4557 4557
ReadX 13435 1052 4 4
ReadX 13435 1056 314 314
ReadX 13435 1056 11056 11056
Close 13435
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13436
ReadX 13436 0 511 511
ReadX 13436 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13437
ReadX 13437 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13438
ReadX 13438 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13439
ReadX 13439 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13440
ReadX 13440 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13441
ReadX 13441 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13442
ReadX 13442 0 53 53
ReadX 13442 53 2 2
ReadX 13442 55 2 2
ReadX 13442 57 184 184
ReadX 13442 241 298 298
Close 13442
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13443
ReadX 13443 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13444
ReadX 13444 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13445
ReadX 13445 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13446
ReadX 13446 0 511 511
ReadX 13445 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13447
ReadX 13447 0 53 53
ReadX 13447 53 2 2
ReadX 13447 55 480 480
ReadX 13447 535 2 2
Close 13447
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13448
ReadX 13448 0 41 41
ReadX 13436 2048 2048 2048
ReadX 13437 2048 2048 2048
ReadX 13436 1144 2048 2048
ReadX 13436 1152 2048 2048
ReadX 13436 4096 16384 16384
WriteX 13436 2048 2048 2048
WriteX 13437 2048 2048 2048
WriteX 13436 0 88 88
WriteX 13437 0 88 88
Close 13443
Close 13444
Close 13445
Close 13446
Close 13448
Close 13436
Close 13437
Close 13440
Close 13441
Close 13438
Close 13439
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.FSL
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FSL 0x40 0x1 13449
Close 13449
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FSL 0x40 0x1 13450
QUERY_FILE_INFORMATION 13450
ReadX 13450 0 64 64
ReadX 13450 144 64 64
ReadX 13450 224 84 84
ReadX 13450 478 16 16
ReadX 13450 1056 6176 6176
Close 13450
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13451
ReadX 13451 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13452
ReadX 13452 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13453
ReadX 13453 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13454
ReadX 13454 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13455
ReadX 13455 0 53 53
ReadX 13455 53 28 28
ReadX 13455 81 28 28
ReadX 13455 109 28 28
ReadX 13455 137 28 28
ReadX 13455 165 28 28
ReadX 13455 193 28 28
ReadX 13455 221 28 28
ReadX 13455 249 4 4
ReadX 13455 253 4 4
ReadX 13455 257 4 4
ReadX 13455 261 28 28
ReadX 13455 289 2 2
ReadX 13455 291 2 2
ReadX 13455 293 2 2
Close 13455
ReadX 13451 2048 2048 2048
ReadX 13452 2048 2048 2048
ReadX 13451 1280 2048 2048
ReadX 13454 2048 2048 2048
ReadX 13453 2048 2048 2048
WriteX 13451 1280 2048 2048
WriteX 13454 2048 2048 2048
WriteX 13453 2048 2048 2048
WriteX 13452 2048 2048 2048
WriteX 13451 0 88 88
WriteX 13452 0 88 88
WriteX 13453 0 88 88
WriteX 13454 0 88 88
WriteX 13451 1280 2048 2048
WriteX 13454 2048 2048 2048
WriteX 13453 2048 2048 2048
WriteX 13452 2048 2048 2048
WriteX 13451 0 88 88
WriteX 13452 0 88 88
WriteX 13453 0 88 88
WriteX 13454 0 88 88
WriteX 13451 1280 2048 2048
WriteX 13454 2048 2048 2048
WriteX 13453 2048 2048 2048
WriteX 13452 2048 2048 2048
WriteX 13451 0 88 88
WriteX 13452 0 88 88
WriteX 13453 0 88 88
WriteX 13454 0 88 88
Close 13451
Close 13452
Close 13453
Close 13454
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13456
ReadX 13456 0 511 511
ReadX 13456 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13457
ReadX 13457 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13458
ReadX 13458 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13459
ReadX 13459 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13460
ReadX 13460 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13461
ReadX 13461 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13462
ReadX 13462 0 53 53
ReadX 13462 53 2 2
ReadX 13462 55 2 2
ReadX 13462 57 184 184
ReadX 13462 241 298 298
Close 13462
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13463
ReadX 13463 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13464
ReadX 13464 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13465
ReadX 13465 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13466
ReadX 13466 0 511 511
ReadX 13465 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13467
ReadX 13467 0 53 53
ReadX 13467 53 2 2
ReadX 13467 55 480 480
ReadX 13467 535 2 2
Close 13467
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13468
ReadX 13468 0 41 41
ReadX 13456 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x2 13472
FIND_FIRST \clients\client1\~dmtmp\*
Close 13472
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 13473
QUERY_FILE_INFORMATION 13473
WriteX 13473 2047 1 1
QUERY_FILE_INFORMATION 13473
WriteX 13473 0 2048 2048
Close 13473
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 13474
ReadX 13474 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
WriteX 13474 4095 1 1
QUERY_FILE_INFORMATION 13474
WriteX 13474 2048 2048 2048
WriteX 13474 0 88 88
Close 13474
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 13475
ReadX 13475 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
ReadX 13475 2048 2048 2048
Close 13463
Close 13464
Close 13465
Close 13466
Close 13468
Close 13456
Close 13457
Close 13460
Close 13461
Close 13458
Close 13459
WriteX 13475 2048 2048 2048
WriteX 13475 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13476
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13476 0 511 511
ReadX 13476 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13477
ReadX 13477 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13478
ReadX 13478 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13479
ReadX 13479 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13480
ReadX 13480 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13481
ReadX 13481 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13482
ReadX 13482 0 53 53
ReadX 13482 53 2 2
ReadX 13482 55 2 2
ReadX 13482 57 184 184
ReadX 13482 241 298 298
Close 13482
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13483
ReadX 13483 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13484
ReadX 13484 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13485
ReadX 13485 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13486
ReadX 13486 0 511 511
ReadX 13485 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13487
ReadX 13487 0 53 53
ReadX 13487 53 2 2
ReadX 13487 55 480 480
ReadX 13487 535 2 2
Close 13487
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13488
ReadX 13488 0 41 41
ReadX 13476 2048 2048 2048
ReadX 13476 1152 2048 2048
ReadX 13476 4096 16384 16384
ReadX 13476 1280 16384 16384
ReadX 13476 2304 16384 16384
ReadX 13476 3328 16384 16384
ReadX 13476 272 16384 16384
ReadX 13476 336 16384 16384
ReadX 13476 400 16384 16384
ReadX 13476 464 16384 16384
ReadX 13476 528 16384 16384
ReadX 13476 592 16384 16384
ReadX 13476 656 16384 16384
ReadX 13476 720 16384 16384
ReadX 13476 784 16384 16384
ReadX 13476 848 16384 16384
ReadX 13476 912 16384 16384
ReadX 13476 976 16384 16384
ReadX 13476 1040 16384 16384
ReadX 13476 1104 12288 12288
Close 13483
Close 13484
Close 13485
Close 13486
Close 13488
Close 13476
Close 13477
Close 13480
Close 13481
Close 13478
Close 13479
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13489
FIND_FIRST \clients\client1\~dmtmp\*
Close 13489
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13490
QUERY_FILE_INFORMATION 13490
WriteX 13490 0 2048 2048
WriteX 13490 2048 4096 4096
WriteX 13490 0 88 88
Close 13490
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13491
ReadX 13491 0 511 511
ReadX 13491 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13491
WriteX 13475 2048 2048 2048
WriteX 13475 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13492
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13492 0 511 511
ReadX 13492 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13493
ReadX 13493 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13494
ReadX 13494 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13495
ReadX 13495 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13496
ReadX 13496 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13497
ReadX 13497 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13498
ReadX 13498 0 53 53
ReadX 13498 53 2 2
ReadX 13498 55 2 2
ReadX 13498 57 184 184
ReadX 13498 241 298 298
Close 13498
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13499
ReadX 13499 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13500
ReadX 13500 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13501
ReadX 13501 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13502
ReadX 13502 0 511 511
ReadX 13501 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13503
ReadX 13503 0 53 53
ReadX 13503 53 2 2
ReadX 13503 55 480 480
ReadX 13503 535 2 2
Close 13503
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13504
ReadX 13504 0 41 41
ReadX 13492 2048 2048 2048
ReadX 13492 1152 2048 2048
ReadX 13492 4096 16384 16384
ReadX 13492 1280 16384 16384
ReadX 13492 2304 16384 16384
ReadX 13492 3328 16384 16384
ReadX 13492 272 16384 16384
ReadX 13492 336 16384 16384
ReadX 13492 400 16384 16384
ReadX 13492 464 16384 16384
ReadX 13492 528 16384 16384
ReadX 13492 592 16384 16384
ReadX 13492 656 16384 16384
ReadX 13492 720 16384 16384
ReadX 13492 784 16384 16384
ReadX 13492 848 16384 16384
ReadX 13492 912 16384 16384
ReadX 13492 976 16384 16384
ReadX 13492 1040 16384 16384
ReadX 13492 1104 12288 12288
Close 13499
Close 13500
Close 13501
Close 13502
Close 13504
Close 13492
Close 13493
Close 13496
Close 13497
Close 13494
Close 13495
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13505
FIND_FIRST \clients\client1\~dmtmp\*
Close 13505
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13506
QUERY_FILE_INFORMATION 13506
WriteX 13506 0 2048 2048
WriteX 13506 2048 4096 4096
WriteX 13506 0 88 88
Close 13506
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13507
ReadX 13507 0 511 511
ReadX 13507 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13507
Close 13475
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 13508
QUERY_FILE_INFORMATION 13508
Close 13508
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
Unlink \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 13509
Close 13509
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 13510
QUERY_FILE_INFORMATION 13510
ReadX 13510 0 64 64
ReadX 13510 144 64 64
ReadX 13510 224 156 156
ReadX 13510 1193 128 128
ReadX 13510 1201 128 128
ReadX 13510 1072 4 4
ReadX 13510 1076 1925 1925
ReadX 13510 758 4 4
ReadX 13510 762 4557 4557
ReadX 13510 1052 4 4
ReadX 13510 1056 314 314
ReadX 13510 1056 11056 11056
Close 13510
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13511
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13511 0 511 511
ReadX 13511 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13512
ReadX 13512 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13513
ReadX 13513 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13514
ReadX 13514 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13515
ReadX 13515 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13516
ReadX 13516 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13517
ReadX 13517 0 53 53
ReadX 13517 53 2 2
ReadX 13517 55 2 2
ReadX 13517 57 184 184
ReadX 13517 241 298 298
Close 13517
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13518
ReadX 13518 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13519
ReadX 13519 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13520
ReadX 13520 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13521
ReadX 13521 0 511 511
ReadX 13520 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13522
ReadX 13522 0 53 53
ReadX 13522 53 2 2
ReadX 13522 55 480 480
ReadX 13522 535 2 2
Close 13522
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13523
ReadX 13523 0 41 41
ReadX 13511 2048 2048 2048
ReadX 13511 1152 2048 2048
ReadX 13511 4096 16384 16384
Close 13518
Close 13519
Close 13520
Close 13521
Close 13523
Close 13511
Close 13512
Close 13515
Close 13516
Close 13513
Close 13514
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\QUENRD 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\QUENRD 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13524
ReadX 13524 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13525
ReadX 13525 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13526
ReadX 13526 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13527
ReadX 13527 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13528
ReadX 13528 0 53 53
ReadX 13528 53 2 2
ReadX 13528 55 480 480
ReadX 13528 535 2 2
Close 13528
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13529
ReadX 13529 0 511 511
ReadX 13529 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13530
ReadX 13530 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13531
ReadX 13531 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13532
ReadX 13532 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13533
ReadX 13533 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13534
ReadX 13534 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13535
ReadX 13535 0 41 41
ReadX 13529 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13536
ReadX 13536 0 53 53
ReadX 13536 53 2 2
ReadX 13536 55 2 2
ReadX 13536 57 184 184
ReadX 13536 241 298 298
Close 13536
ReadX 13524 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x2 13540
FIND_FIRST \clients\client1\~dmtmp\*
Close 13540
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 13541
QUERY_FILE_INFORMATION 13541
WriteX 13541 2047 1 1
QUERY_FILE_INFORMATION 13541
WriteX 13541 0 2048 2048
Close 13541
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 13542
ReadX 13542 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
WriteX 13542 4095 1 1
QUERY_FILE_INFORMATION 13542
WriteX 13542 2048 2048 2048
WriteX 13542 0 88 88
Close 13542
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 13543
ReadX 13543 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
ReadX 13543 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x2 13547
Close 13547
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 13548
QUERY_FILE_INFORMATION 13548
WriteX 13548 2047 1 1
QUERY_FILE_INFORMATION 13548
WriteX 13548 0 2048 2048
Close 13548
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 13549
ReadX 13549 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
WriteX 13549 4095 1 1
QUERY_FILE_INFORMATION 13549
WriteX 13549 2048 2048 2048
WriteX 13549 0 88 88
Close 13549
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 13550
ReadX 13550 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
ReadX 13550 2048 2048 2048
Close 13535
Close 13529
Close 13530
Close 13533
Close 13534
Close 13531
Close 13532
Close 13524
Close 13525
Close 13526
Close 13527
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13551
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13551 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13552
ReadX 13552 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13553
ReadX 13553 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13554
ReadX 13554 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13555
ReadX 13555 0 53 53
ReadX 13555 53 2 2
ReadX 13555 55 480 480
ReadX 13555 535 2 2
Close 13555
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13556
ReadX 13556 0 511 511
ReadX 13556 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13557
ReadX 13557 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13558
ReadX 13558 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13559
ReadX 13559 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13560
ReadX 13560 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13561
ReadX 13561 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13562
ReadX 13562 0 41 41
ReadX 13556 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13563
ReadX 13563 0 53 53
ReadX 13563 53 2 2
ReadX 13563 55 2 2
ReadX 13563 57 184 184
ReadX 13563 241 298 298
Close 13563
ReadX 13551 2048 2048 2048
ReadX 13551 384 16384 16384
ReadX 13551 1408 16384 16384
ReadX 13551 2560 16384 16384
ReadX 13551 3584 16384 16384
ReadX 13551 288 16384 16384
ReadX 13551 352 16384 16384
ReadX 13551 416 16384 16384
ReadX 13551 480 16384 16384
ReadX 13551 552 16384 16384
ReadX 13551 616 16384 16384
ReadX 13551 680 16384 16384
ReadX 13551 744 16384 16384
ReadX 13551 808 16384 16384
ReadX 13551 872 16384 16384
ReadX 13551 936 10240 10240
Close 13562
Close 13556
Close 13557
Close 13560
Close 13561
Close 13558
Close 13559
Close 13551
Close 13552
Close 13553
Close 13554
Close 13543
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 13564
QUERY_FILE_INFORMATION 13564
Close 13564
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
Unlink \clients\client1\~dmtmp\PARADOX\__52E2B.DB
Close 13550
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 13565
QUERY_FILE_INFORMATION 13565
Close 13565
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
Unlink \clients\client1\~dmtmp\PARADOX\__52EF7.DB
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13566
ReadX 13566 0 65471 65471
ReadX 13566 65471 63 63
ReadX 13566 65534 65471 65471
ReadX 13566 131005 63 63
ReadX 13566 131068 65471 65471
ReadX 13566 196539 63 63
ReadX 13566 196602 65471 65471
ReadX 13566 262073 63 63
ReadX 13566 262136 65471 65471
ReadX 13566 327607 63 63
ReadX 13566 327670 10 10
Close 13566
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13567
ReadX 13567 0 65471 65471
ReadX 13567 65471 63 63
ReadX 13567 65534 65471 65471
ReadX 13567 131005 63 63
ReadX 13567 131068 65471 65471
ReadX 13567 196539 63 63
ReadX 13567 196602 65471 65471
ReadX 13567 262073 63 63
ReadX 13567 262136 65471 65471
ReadX 13567 327607 63 63
ReadX 13567 327670 65471 65471
ReadX 13567 393141 63 63
ReadX 13567 393204 65471 65471
ReadX 13567 458675 63 63
ReadX 13567 458738 65471 65471
ReadX 13567 524209 63 63
ReadX 13567 524272 65471 65471
ReadX 13567 589743 63 63
ReadX 13567 589806 65471 65471
ReadX 13567 655277 63 63
ReadX 13567 655340 32 32
Close 13567
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13568
ReadX 13568 0 65471 65471
ReadX 13568 65471 63 63
ReadX 13568 65534 65471 65471
ReadX 13568 131005 63 63
ReadX 13568 131068 65471 65471
ReadX 13568 196539 63 63
ReadX 13568 196602 65471 65471
ReadX 13568 262073 63 63
ReadX 13568 262136 65471 65471
ReadX 13568 327607 63 63
ReadX 13568 327670 65471 65471
ReadX 13568 393141 63 63
ReadX 13568 393204 65471 65471
ReadX 13568 458675 63 63
ReadX 13568 458738 65471 65471
ReadX 13568 524209 63 63
ReadX 13568 524272 65471 65471
ReadX 13568 589743 63 63
ReadX 13568 589806 65471 65471
ReadX 13568 655277 63 63
ReadX 13568 655340 65471 65471
ReadX 13568 720811 63 63
ReadX 13568 720874 65471 65471
ReadX 13568 786345 63 63
ReadX 13568 786408 65471 65471
ReadX 13568 851879 63 63
ReadX 13568 851942 65471 65471
ReadX 13568 917413 63 63
ReadX 13568 917476 65471 65471
ReadX 13568 982947 63 63
ReadX 13568 983010 65471 65471
ReadX 13568 1048481 63 63
ReadX 13568 1048544 65471 65471
ReadX 13568 1114015 63 63
ReadX 13568 1114078 65471 65471
ReadX 13568 1179549 63 63
ReadX 13568 1179612 65471 65471
ReadX 13568 1245083 63 63
ReadX 13568 1245146 65471 65471
ReadX 13568 1310617 63 63
ReadX 13568 1310680 65471 65471
ReadX 13568 1376151 63 63
ReadX 13568 1376214 65471 65471
ReadX 13568 1441685 63 63
ReadX 13568 1441748 65471 65471
ReadX 13568 1507219 63 63
ReadX 13568 1507282 65471 65471
ReadX 13568 1572753 63 63
ReadX 13568 1572816 65471 65471
ReadX 13568 1638287 63 63
ReadX 13568 1638350 65471 65471
ReadX 13568 1703821 63 63
ReadX 13568 1703884 65471 65471
ReadX 13568 1769355 63 63
ReadX 13568 1769418 65471 65471
ReadX 13568 1834889 63 63
ReadX 13568 1834952 32824 32824
Close 13568
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TEMPLATES 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\STARTUP 1
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\CHAP10 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\CHAP10.DOC 
NTCreateX \clients\client1\~dmtmp\WORD\CHAP10.DOC 0x40 0x1 13569
QUERY_FILE_INFORMATION 13569
ReadX 13569 0 512 512
ReadX 13569 512 512 512
ReadX 13569 1024 512 512
QUERY_FILE_INFORMATION 13569
QUERY_FILE_INFORMATION 13569
ReadX 13569 2560 2048 2048
ReadX 13569 1984 2048 2048
NTCreateX \clients\client1\~dmtmp\WORD\~$CHAP10.DOC 0x40 0x2 13570
WriteX 13570 52 1 1
QUERY_FILE_INFORMATION 13570
WriteX 13570 0 53 53
Close 13570
ReadX 13569 2208 650 650
ReadX 13569 1920 2048 2048
ReadX 13569 2112 2048 2048
ReadX 13569 1856 2048 2048
ReadX 13569 1824 2048 2048
ReadX 13569 1536 512 512
ReadX 13569 1632 1536 1536
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT 1
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x2 13571
Close 13571
Unlink \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
ReadX 13569 1568 512 512
ReadX 13569 1536 512 512
ReadX 13569 2176 384 384
ReadX 13569 1600 416 416
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x40 0x2 13572
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
ReadX 13569 288 2048 2048
ReadX 13569 2336 2048 2048
ReadX 13569 4384 2048 2048
ReadX 13569 6432 2048 2048
ReadX 13569 8480 2048 2048
ReadX 13569 10528 2048 2048
ReadX 13569 12576 2048 2048
WriteX 13572 15359 1 1
QUERY_FILE_INFORMATION 13572
ReadX 13569 14624 2048 2048
ReadX 13569 16672 2048 2048
ReadX 13569 18720 2048 2048
ReadX 13569 1728 2048 2048
WriteX 13572 0 15360 15360
Close 13572
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x40 0x1 13573
QUERY_FILE_INFORMATION 13573
ReadX 13573 0 512 512
ReadX 13573 2048 512 512
ReadX 13573 2560 512 512
QUERY_FILE_INFORMATION 13573
QUERY_FILE_INFORMATION 13573
QUERY_FILE_INFORMATION 13573
QUERY_FILE_INFORMATION 13573
QUERY_FILE_INFORMATION 13573
WriteX 13573 2152 384 384
QUERY_FILE_INFORMATION 13573
WriteX 13573 2150 22 22
WriteX 13573 2144 106 106
QUERY_FILE_INFORMATION 13573
WriteX 13573 2176 496 496
ReadX 13573 2176 496 496
QUERY_FILE_INFORMATION 13573
WriteX 13573 2440 384 384
QUERY_FILE_INFORMATION 13573
WriteX 13573 2152 384 384
WriteX 13573 2432 112 112
QUERY_FILE_INFORMATION 13573
WriteX 13573 2439 16 16
QUERY_FILE_INFORMATION 13573
WriteX 13573 2208 220 220
ReadX 13573 2208 220 220
QUERY_FILE_INFORMATION 13573
QUERY_FILE_INFORMATION 13573
WriteX 13573 2440 220 220
QUERY_FILE_INFORMATION 13573
WriteX 13573 2453 36 36
WriteX 13573 2080 512 512
WriteX 13573 2176 512 512
WriteX 13573 2112 512 512
WriteX 13573 2048 512 512
WriteX 13573 0 512 512
QUERY_FILE_INFORMATION 13569
QUERY_FILE_INFORMATION 13569
WriteX 13573 2080 512 512
Close 13573
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x200000 0x1 13574
Close 13574
Rename \clients\client1\~dmtmp\WORD\~WRD0000.TMP \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x1 13575
QUERY_FILE_INFORMATION 13575
ReadX 13575 0 512 512
ReadX 13575 2048 512 512
ReadX 13575 2560 512 512
QUERY_FILE_INFORMATION 13575
QUERY_FILE_INFORMATION 13575
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
NTCreateX \clients\client1\~dmtmp\WORD\~$CHAP10.DOC 0x40 0x1 13576
Close 13576
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
Unlink \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
Close 13569
ReadX 13575 1408 512 512
ReadX 13575 2048 512 512
ReadX 13575 1536 512 512
ReadX 13575 2560 512 512
ReadX 13575 3072 512 512
ReadX 13575 3584 512 512
ReadX 13575 4096 512 512
ReadX 13575 4608 512 512
ReadX 13575 5120 512 512
ReadX 13575 5632 512 512
ReadX 13575 6144 512 512
ReadX 13575 6656 512 512
ReadX 13575 7168 512 512
ReadX 13575 7680 512 512
ReadX 13575 8192 512 512
ReadX 13575 8704 512 512
ReadX 13575 9216 512 512
ReadX 13575 9728 512 512
ReadX 13575 10240 512 512
ReadX 13575 10752 512 512
ReadX 13575 11264 512 512
ReadX 13575 11776 512 512
ReadX 13575 12288 512 512
ReadX 13575 12800 512 512
ReadX 13575 13312 512 512
ReadX 13575 13824 512 512
ReadX 13575 14336 512 512
ReadX 13575 14848 512 512
ReadX 13575 15360 512 0
ReadX 13575 15360 512 0
ReadX 13575 15360 512 0
ReadX 13575 15360 512 0
ReadX 13575 15360 512 0
ReadX 13575 15360 512 0
ReadX 13575 15360 512 0
ReadX 13575 15360 512 0
ReadX 13575 15360 512 0
ReadX 13575 15360 512 0
ReadX 13575 2560 2048 2048
ReadX 13575 4608 2048 2048
ReadX 13575 6656 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\BASEMACH.DOC
NTCreateX \clients\client1\~dmtmp\WORD\BASEMACH.DOC 0x40 0x1 13577
QUERY_FILE_INFORMATION 13577
ReadX 13577 0 512 512
ReadX 13577 512 512 512
ReadX 13577 1024 512 512
QUERY_FILE_INFORMATION 13577
QUERY_FILE_INFORMATION 13577
ReadX 13577 352 2048 2048
ReadX 13577 608 1097 1097
ReadX 13577 576 1609 1609
ReadX 13577 4096 512 512
ReadX 13577 1536 512 512
ReadX 13577 3840 256 256
ReadX 13577 288 576 576
ReadX 13577 512 512 512
ReadX 13577 480 512 512
ReadX 13577 544 512 512
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\WORD\BASEMACH.DOC 0x40 0x1 13578
ReadX 13578 0 4096 4096
ReadX 13578 4096 4096 4096
ReadX 13578 8192 4096 4096
Close 13577
Close 13578
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\RESULTS.XLS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x40 0x2 13579
WriteX 13579 15359 1 1
QUERY_FILE_INFORMATION 13579
WriteX 13579 0 15360 15360
Close 13579
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x40 0x1 13580
QUERY_FILE_INFORMATION 13580
ReadX 13580 0 512 512
ReadX 13580 2048 512 512
ReadX 13580 2560 512 512
QUERY_FILE_INFORMATION 13580
QUERY_FILE_INFORMATION 13580
QUERY_FILE_INFORMATION 13580
QUERY_FILE_INFORMATION 13580
QUERY_FILE_INFORMATION 13580
WriteX 13580 2152 384 384
QUERY_FILE_INFORMATION 13580
WriteX 13580 2150 22 22
WriteX 13580 2144 106 106
QUERY_FILE_INFORMATION 13580
WriteX 13580 2176 476 476
ReadX 13580 2176 476 476
QUERY_FILE_INFORMATION 13580
WriteX 13580 2440 384 384
QUERY_FILE_INFORMATION 13580
WriteX 13580 2152 384 384
WriteX 13580 2432 92 92
QUERY_FILE_INFORMATION 13580
WriteX 13580 2437 36 36
QUERY_FILE_INFORMATION 13580
WriteX 13580 2208 220 220
ReadX 13580 2208 220 220
QUERY_FILE_INFORMATION 13580
QUERY_FILE_INFORMATION 13580
WriteX 13580 2440 220 220
QUERY_FILE_INFORMATION 13580
WriteX 13580 2453 36 36
WriteX 13580 2080 512 512
WriteX 13580 2176 512 512
WriteX 13580 2112 512 512
WriteX 13580 2048 512 512
WriteX 13580 0 512 512
QUERY_FILE_INFORMATION 13575
QUERY_FILE_INFORMATION 13575
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL0004.TMP 1
Close 13575
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x200000 0x1 13581
Close 13581
Rename \clients\client1\~dmtmp\WORD\HANDOUT.DOC \clients\client1\~dmtmp\WORD\~WRL0004.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL0004.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x40 0x1 13582
QUERY_FILE_INFORMATION 13582
ReadX 13582 0 512 512
ReadX 13582 2048 512 512
ReadX 13582 2560 512 512
QUERY_FILE_INFORMATION 13582
QUERY_FILE_INFORMATION 13582
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x200000 0x1 13583
Close 13583
WriteX 13580 2080 512 512
Close 13580
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x200000 0x1 13584
Close 13584
Rename \clients\client1\~dmtmp\WORD\~WRD0003.TMP \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x1 13585
QUERY_FILE_INFORMATION 13585
ReadX 13585 0 512 512
ReadX 13585 2048 512 512
ReadX 13585 2560 512 512
QUERY_FILE_INFORMATION 13585
QUERY_FILE_INFORMATION 13585
ReadX 13585 1312 512 512
ReadX 13585 1536 512 512
ReadX 13585 2048 512 512
ReadX 13585 576 512 512
ReadX 13585 1088 512 512
ReadX 13585 1056 512 512
ReadX 13585 1120 512 512
ReadX 13585 1184 512 512
ReadX 13585 2560 2048 2048
ReadX 13585 4608 2048 2048
ReadX 13585 6656 2048 2048
ReadX 13585 8704 2048 2048
ReadX 13585 10752 2048 2048
ReadX 13585 12800 2048 2048
ReadX 13585 14848 2048 512
ReadX 13585 15360 1536 0
ReadX 13585 1088 2048 2048
ReadX 13585 3136 2048 2048
ReadX 13585 1665 5835 5835
ReadX 13585 1856 2048 2048
ReadX 13585 2112 512 512
ReadX 13585 2152 384 384
ReadX 13585 2432 92 92
ReadX 13585 2176 512 512
ReadX 13585 2440 220 220
QUERY_FILE_INFORMATION 13585
QUERY_FILE_INFORMATION 13585
ReadX 13585 2432 512 512
WriteX 13585 2272 512 512
ReadX 13585 2144 512 512
WriteX 13585 2304 512 512
WriteX 13585 2272 92 92
WriteX 13585 2208 512 512
WriteX 13585 2720 512 512
WriteX 13585 0 512 512
QUERY_FILE_INFORMATION 13585
QUERY_FILE_INFORMATION 13585
ReadX 13585 1312 4096 4096
ReadX 13585 5408 4096 4096
ReadX 13585 9504 3305 3305
ReadX 13585 512 4096 4096
QUERY_FILE_INFORMATION 13585
QUERY_FILE_INFORMATION 13585
QUERY_FILE_INFORMATION 13585
WriteX 13585 3132 50 50
WriteX 13585 3182 4096 4096
WriteX 13585 7278 4096 4096
WriteX 13585 15469 1 1
QUERY_FILE_INFORMATION 13585
WriteX 13585 11374 4096 4096
WriteX 13585 15470 3584 3584
WriteX 13585 2144 512 512
WriteX 13585 2336 4096 4096
WriteX 13585 6432 4096 4096
WriteX 13585 10528 4096 4096
WriteX 13585 14624 462 462
WriteX 13585 2048 512 512
WriteX 13585 2560 512 512
WriteX 13585 0 512 512
QUERY_FILE_INFORMATION 13585
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FACTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FACTS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\FACTS.DOC 0x40 0x1 13586
QUERY_FILE_INFORMATION 13586
ReadX 13586 0 512 512
ReadX 13586 1152 512 512
ReadX 13586 1664 512 512
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
ReadX 13586 512 2048 2048
ReadX 13586 928 2048 2048
NTCreateX \clients\client1\~dmtmp\WORD\~$FACTS.DOC 0x40 0x2 13587
WriteX 13587 52 1 1
QUERY_FILE_INFORMATION 13587
WriteX 13587 0 53 53
Close 13587
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
ReadX 13586 1120 504 504
ReadX 13586 896 2048 2048
ReadX 13586 1056 1528 1528
ReadX 13586 864 2048 2048
ReadX 13586 832 2048 2048
ReadX 13586 736 2048 2048
ReadX 13586 1216 512 512
ReadX 13586 1256 384 384
ReadX 13586 1536 140 140
ReadX 13586 1280 512 512
ReadX 13586 1548 252 252
ReadX 13585 1184 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS 1
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x2 13588
Close 13588
Unlink \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x40 0x2 13589
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC 1
ReadX 13586 2560 2048 2048
ReadX 13586 4608 2048 2048
ReadX 13586 6656 2048 2048
ReadX 13586 8704 2048 2048
ReadX 13586 10752 2048 2048
WriteX 13589 12005 1 1
QUERY_FILE_INFORMATION 13589
WriteX 13589 0 12006 12006
Close 13589
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x40 0x1 13590
QUERY_FILE_INFORMATION 13590
ReadX 13590 0 512 512
ReadX 13590 1152 512 512
ReadX 13590 1664 512 512
QUERY_FILE_INFORMATION 13590
QUERY_FILE_INFORMATION 13590
QUERY_FILE_INFORMATION 13590
QUERY_FILE_INFORMATION 13590
QUERY_FILE_INFORMATION 13590
QUERY_FILE_INFORMATION 13590
QUERY_FILE_INFORMATION 13590
WriteX 13590 1256 384 384
QUERY_FILE_INFORMATION 13590
WriteX 13590 1254 22 22
WriteX 13590 1248 106 106
QUERY_FILE_INFORMATION 13590
WriteX 13590 1280 508 508
ReadX 13590 1280 508 508
QUERY_FILE_INFORMATION 13590
WriteX 13590 1544 384 384
QUERY_FILE_INFORMATION 13590
WriteX 13590 1256 384 384
WriteX 13590 1536 124 124
QUERY_FILE_INFORMATION 13590
WriteX 13590 1543 4 4
QUERY_FILE_INFORMATION 13590
WriteX 13590 1312 252 252
ReadX 13590 1312 252 252
QUERY_FILE_INFORMATION 13590
QUERY_FILE_INFORMATION 13590
WriteX 13590 1544 252 252
QUERY_FILE_INFORMATION 13590
WriteX 13590 1559 4 4
WriteX 13590 1184 512 512
WriteX 13590 1280 512 512
WriteX 13590 1216 512 512
WriteX 13590 1152 512 512
WriteX 13590 0 512 512
QUERY_FILE_INFORMATION 13586
QUERY_FILE_INFORMATION 13586
WriteX 13590 1184 512 512
Close 13590
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x200000 0x1 13591
Close 13591
Rename \clients\client1\~dmtmp\WORD\~WRD3497.TMP \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x1 13592
QUERY_FILE_INFORMATION 13592
ReadX 13592 0 512 512
ReadX 13592 1152 512 512
ReadX 13592 1664 512 512
QUERY_FILE_INFORMATION 13592
QUERY_FILE_INFORMATION 13592
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\~$FACTS.DOC 0x40 0x1 13593
Close 13593
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
Unlink \clients\client1\~dmtmp\WORD\~$FACTS.DOC
Close 13586
ReadX 13592 736 512 512
ReadX 13592 1536 2048 2048
ReadX 13592 3584 2048 2048
ReadX 13592 5632 2048 2048
ReadX 13592 7680 2048 2048
ReadX 13592 9728 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x40 0x2 13594
WriteX 13594 11990 1 1
QUERY_FILE_INFORMATION 13594
WriteX 13594 0 11991 11991
Close 13594
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x40 0x1 13595
QUERY_FILE_INFORMATION 13595
ReadX 13595 0 512 512
ReadX 13595 1184 512 512
ReadX 13595 1696 512 512
QUERY_FILE_INFORMATION 13595
QUERY_FILE_INFORMATION 13595
QUERY_FILE_INFORMATION 13595
QUERY_FILE_INFORMATION 13595
QUERY_FILE_INFORMATION 13595
QUERY_FILE_INFORMATION 13595
QUERY_FILE_INFORMATION 13595
WriteX 13595 1288 384 384
QUERY_FILE_INFORMATION 13595
WriteX 13595 1286 22 22
WriteX 13595 1280 106 106
QUERY_FILE_INFORMATION 13595
WriteX 13595 1312 508 508
ReadX 13595 1312 508 508
QUERY_FILE_INFORMATION 13595
WriteX 13595 1576 384 384
QUERY_FILE_INFORMATION 13595
WriteX 13595 1288 384 384
WriteX 13595 1568 124 124
QUERY_FILE_INFORMATION 13595
WriteX 13595 1575 4 4
QUERY_FILE_INFORMATION 13595
WriteX 13595 1344 252 252
ReadX 13595 1344 252 252
QUERY_FILE_INFORMATION 13595
QUERY_FILE_INFORMATION 13595
WriteX 13595 1576 252 252
QUERY_FILE_INFORMATION 13595
WriteX 13595 1591 4 4
WriteX 13595 1216 512 512
WriteX 13595 1312 512 512
WriteX 13595 1248 512 512
WriteX 13595 1184 512 512
WriteX 13595 0 512 512
QUERY_FILE_INFORMATION 13592
QUERY_FILE_INFORMATION 13592
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL1146.TMP 1
Close 13592
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x200000 0x1 13596
Close 13596
Rename \clients\client1\~dmtmp\WORD\TIPS.DOC \clients\client1\~dmtmp\WORD\~WRL1146.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL1146.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x40 0x1 13597
QUERY_FILE_INFORMATION 13597
ReadX 13597 0 512 512
ReadX 13597 1152 512 512
ReadX 13597 1664 512 512
QUERY_FILE_INFORMATION 13597
QUERY_FILE_INFORMATION 13597
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x200000 0x1 13598
Close 13598
WriteX 13595 1216 512 512
Close 13595
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x200000 0x1 13599
Close 13599
Rename \clients\client1\~dmtmp\WORD\~WRD1119.TMP \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x1 13600
QUERY_FILE_INFORMATION 13600
ReadX 13600 0 512 512
ReadX 13600 1184 512 512
ReadX 13600 1696 512 512
QUERY_FILE_INFORMATION 13600
QUERY_FILE_INFORMATION 13600
ReadX 13600 1536 512 512
ReadX 13600 736 512 512
ReadX 13600 2048 512 512
ReadX 13600 2560 512 512
ReadX 13600 3072 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS 1
NTCreateX \clients\client1\~dmtmp\WORD\FSA4230.TMP 0x40 0x2 13601
Close 13601
Unlink \clients\client1\~dmtmp\WORD\FSA4230.TMP
ReadX 13600 914 3899 3899
ReadX 13600 1248 512 512
ReadX 13600 1288 384 384
ReadX 13600 1568 124 124
ReadX 13600 1312 512 512
ReadX 13600 1576 252 252
QUERY_FILE_INFORMATION 13600
QUERY_FILE_INFORMATION 13600
ReadX 13600 1568 512 512
WriteX 13600 1408 512 512
ReadX 13600 1280 512 512
WriteX 13600 1440 512 512
WriteX 13600 1408 124 124
WriteX 13600 1344 512 512
WriteX 13600 1856 512 512
WriteX 13600 0 512 512
QUERY_FILE_INFORMATION 13600
QUERY_FILE_INFORMATION 13600
ReadX 13600 544 4096 4096
ReadX 13600 4640 4096 4096
ReadX 13600 8736 1637 1637
ReadX 13600 512 4096 4096
QUERY_FILE_INFORMATION 13600
QUERY_FILE_INFORMATION 13600
WriteX 13600 1280 512 512
WriteX 13600 1472 3584 3584
WriteX 13600 5056 4096 4096
WriteX 13600 13247 1 1
QUERY_FILE_INFORMATION 13600
WriteX 13600 9152 4096 4096
WriteX 13600 13248 1736 1736
WriteX 13600 1184 512 512
WriteX 13600 1696 512 512
WriteX 13600 0 512 512
QUERY_FILE_INFORMATION 13600
ReadX 13600 1632 1024 1024
ReadX 13600 288 1024 1024
ReadX 13600 1312 2048 2048
ReadX 13600 3360 1024 1024
ReadX 13600 1696 1024 1024
ReadX 13600 2720 512 512
ReadX 13600 3232 512 512
ReadX 13600 3744 512 512
ReadX 13600 4256 512 512
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
ReadX 13600 2066 3998 3998
ReadX 13600 1448 384 384
ReadX 13600 1408 124 124
ReadX 13600 1416 252 252
QUERY_FILE_INFORMATION 13600
QUERY_FILE_INFORMATION 13600
ReadX 13600 1408 512 512
WriteX 13600 1536 512 512
ReadX 13600 1440 512 512
WriteX 13600 2048 512 512
WriteX 13600 1536 124 124
WriteX 13600 512 512 512
WriteX 13600 1024 512 512
WriteX 13600 0 512 512
QUERY_FILE_INFORMATION 13600
ReadX 13600 1696 4096 4096
ReadX 13600 5792 4096 4096
ReadX 13600 9888 1736 1736
ReadX 13600 1280 512 512
ReadX 13600 1472 3584 3584
QUERY_FILE_INFORMATION 13600
QUERY_FILE_INFORMATION 13600
WriteX 13600 3940 156 156
WriteX 13600 4096 512 512
WriteX 13600 544 3584 3584
WriteX 13600 4128 4096 4096
WriteX 13600 8224 3584 3584
WriteX 13600 1344 512 512
WriteX 13600 1856 1536 1536
WriteX 13600 2336 512 512
WriteX 13600 3584 356 356
WriteX 13600 2560 512 512
WriteX 13600 3072 512 512
WriteX 13600 0 512 512
QUERY_FILE_INFORMATION 13600
Close 13582
Close 13585
Close 13600
Close 13597
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x40 0x1 13602
Close 13602
Unlink \clients\client1\~dmtmp\WORD\~WRL0004.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x40 0x1 13603
Close 13603
Unlink \clients\client1\~dmtmp\WORD\~WRL1146.TMP
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13604
WriteX 13604 0 65471 65471
WriteX 13604 65471 63 63
WriteX 13604 65534 65471 65471
WriteX 13604 131005 63 63
Close 13604
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13605
WriteX 13605 0 65471 65471
WriteX 13605 65471 63 63
WriteX 13605 65534 65471 65471
WriteX 13605 131005 63 63
WriteX 13605 131068 65471 65471
WriteX 13605 196539 63 63
WriteX 13605 196602 65471 65471
WriteX 13605 262073 63 63
Close 13605
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13606
WriteX 13606 0 65471 65471
WriteX 13606 65471 63 63
WriteX 13606 65534 65471 65471
WriteX 13606 131005 63 63
WriteX 13606 131068 65471 65471
WriteX 13606 196539 63 63
WriteX 13606 196602 65471 65471
WriteX 13606 262073 63 63
WriteX 13606 262136 65471 65471
WriteX 13606 327607 63 63
WriteX 13606 327670 65471 65471
WriteX 13606 393141 63 63
WriteX 13606 393204 65471 65471
WriteX 13606 458675 63 63
WriteX 13606 458738 65471 65471
WriteX 13606 524209 63 63
Close 13606
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER.MDB
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.MDB 0x40 0x1 13607
QUERY_FILE_INFORMATION 13607
QUERY_FILE_INFORMATION 13607
ReadX 13607 0 16384 16384
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.LDB 0x40 0x2 13608
Close 13608
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.LDB 0x40 0x1 13609
WriteX 13609 63 1 1
QUERY_FILE_INFORMATION 13609
WriteX 13609 0 64 64
ReadX 13607 992 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 344 2048 2048
ReadX 13607 1344 2048 2048
ReadX 13607 1352 2048 2048
ReadX 13607 1320 2048 2048
ReadX 13607 1360 2048 2048
ReadX 13607 1344 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1376 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2304 2048 2048
ReadX 13607 1472 2048 2048
ReadX 13607 0 2048 2048
ReadX 13607 1480 2048 2048
ReadX 13607 1488 2048 2048
ReadX 13607 1496 2048 2048
ReadX 13607 0 2048 2048
ReadX 13607 1504 2048 2048
ReadX 13607 1464 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 1000 2048 2048
ReadX 13607 1416 2048 2048
ReadX 13607 1000 2048 2048
QUERY_FS_INFORMATION 259
ReadX 13607 360 2048 2048
ReadX 13607 368 2048 2048
ReadX 13607 360 2048 2048
ReadX 13607 376 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 1232 2048 2048
ReadX 13607 2432 6144 6144
ReadX 13607 2376 2048 2048
ReadX 13607 2360 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 2376 2048 2048
ReadX 13607 2384 2048 2048
ReadX 13607 2368 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 1296 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 2392 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
ReadX 13607 0 2048 2048
ReadX 13607 2688 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 2688 2048 2048
WriteX 13607 2688 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 0 2048 2048
ReadX 13607 2688 2048 2048
ReadX 13607 2688 2048 2048
ReadX 13607 2688 2048 2048
WriteX 13607 2688 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 0 2048 2048
ReadX 13607 2688 2048 2048
QUERY_FS_INFORMATION 259
ReadX 13607 2688 2048 2048
ReadX 13607 2688 2048 2048
WriteX 13607 2688 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 320 4096 4096
ReadX 13607 0 2048 2048
ReadX 13607 3584 2048 2048
ReadX 13607 3584 2048 2048
ReadX 13607 3584 2048 2048
ReadX 13607 0 2048 2048
WriteX 13607 3584 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2688 2048 2048
ReadX 13607 0 2048 2048
ReadX 13607 2688 2048 2048
ReadX 13607 2688 2048 2048
WriteX 13607 2688 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 0 2048 2048
ReadX 13607 3200 2048 2048
ReadX 13607 3200 2048 2048
ReadX 13607 3200 2048 2048
WriteX 13607 3200 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 0 2048 2048
ReadX 13607 3456 2048 2048
ReadX 13607 3456 2048 2048
ReadX 13607 3456 2048 2048
WriteX 13607 3456 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2496 2048 2048
ReadX 13607 2472 2048 2048
ReadX 13607 2456 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 2472 2048 2048
ReadX 13607 2480 2048 2048
ReadX 13607 2464 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 2488 2048 2048
ReadX 13607 2568 8192 8192
ReadX 13607 1000 2048 2048
ReadX 13607 328 2048 2048
ReadX 13607 3840 2048 2048
ReadX 13607 2048 2048 2048
ReadX 13607 2560 2048 2048
ReadX 13607 920 2048 2048
WriteX 13607 2048 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 312 2048 2048
WriteX 13607 336 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 328 2048 2048
WriteX 13607 2560 2048 2048
WriteX 13607 3840 2048 2048
WriteX 13607 920 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2432 2048 2048
WriteX 13607 2432 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2456 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 0 2048 2048
ReadX 13607 328 2048 2048
ReadX 13607 2560 2048 2048
ReadX 13607 2048 2048 2048
ReadX 13607 3840 2048 2048
ReadX 13607 336 2048 2048
ReadX 13607 920 2048 2048
WriteX 13607 1536 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 2048 2048 2048
WriteX 13607 2560 2048 2048
WriteX 13607 336 2048 2048
WriteX 13607 920 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2048 2048 2048
ReadX 13607 2432 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 2048 2048 2048
WriteX 13607 2432 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2456 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1536 2048 2048
ReadX 13607 3840 2048 2048
ReadX 13607 336 2048 2048
ReadX 13607 920 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 1536 2048 2048
WriteX 13607 336 2048 2048
WriteX 13607 920 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2432 2048 2048
WriteX 13607 2432 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2456 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1536 2048 2048
ReadX 13607 3840 2048 2048
ReadX 13607 336 2048 2048
ReadX 13607 920 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 1536 2048 2048
WriteX 13607 336 2048 2048
WriteX 13607 920 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2432 2048 2048
WriteX 13607 2432 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2456 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1536 2048 2048
ReadX 13607 3840 2048 2048
ReadX 13607 336 2048 2048
ReadX 13607 920 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 1536 2048 2048
WriteX 13607 336 2048 2048
WriteX 13607 920 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2432 2048 2048
WriteX 13607 2432 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2456 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1536 2048 2048
ReadX 13607 3840 2048 2048
ReadX 13607 336 2048 2048
ReadX 13607 920 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 1536 2048 2048
WriteX 13607 336 2048 2048
WriteX 13607 920 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2432 2048 2048
WriteX 13607 2432 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 0 2048 2048
Flush 13607
ReadX 13607 2456 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1536 2048 2048
ReadX 13607 3840 2048 2048
ReadX 13607 336 2048 2048
ReadX 13607 920 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 1536 2048 2048
WriteX 13607 336 2048 2048
WriteX 13607 920 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2432 2048 2048
WriteX 13607 2432 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2624 6144 6144
ReadX 13607 2616 2048 2048
ReadX 13607 2688 2048 2048
ReadX 13607 2600 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 2616 2048 2048
ReadX 13607 2608 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 344 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 520 2048 2048
ReadX 13607 1392 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 400 2048 2048
ReadX 13607 528 2048 2048
ReadX 13607 536 2048 2048
ReadX 13607 824 2048 2048
ReadX 13607 832 2048 2048
ReadX 13607 384 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 408 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 528 2048 2048
ReadX 13607 552 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 824 2048 2048
ReadX 13607 840 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 768 2048 2048
ReadX 13607 2048 2048 2048
WriteX 13607 1415 1 1
WriteX 13607 352 2048 2048
WriteX 13607 1112 2048 2048
WriteX 13607 1400 2048 2048
WriteX 13607 1408 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 2048 2048 2048
WriteX 13607 768 2048 2048
WriteX 13607 344 2048 2048
WriteX 13607 1000 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 416 2048 2048
ReadX 13607 424 2048 2048
ReadX 13607 432 2048 2048
ReadX 13607 440 2048 2048
ReadX 13607 576 16384 16384
ReadX 13607 448 2048 2048
ReadX 13607 456 2048 2048
ReadX 13607 464 2048 2048
ReadX 13607 640 16384 16384
ReadX 13607 704 16384 16384
ReadX 13607 768 10240 10240
QUERY_FS_INFORMATION 259
ReadX 13607 848 2048 2048
ReadX 13607 560 2048 2048
ReadX 13607 808 2048 2048
QUERY_FS_INFORMATION 259
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 2600 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 352 2048 2048
ReadX 13607 1928 8192 8192
ReadX 13607 528 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 824 2048 2048
ReadX 13607 0 2048 2048
Flush 13607
ReadX 13607 2600 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 352 2048 2048
ReadX 13607 528 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 824 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 856 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 0 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 392 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 392 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 472 2048 2048
ReadX 13607 480 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 488 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 928 2048 2048
ReadX 13607 936 2048 2048
ReadX 13607 976 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 392 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 392 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 952 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 0 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 528 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 528 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 816 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 1384 2048 2048
QUERY_FS_INFORMATION 259
ReadX 13607 1336 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 528 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 528 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 0 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1240 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2200 4096 4096
ReadX 13607 2152 2048 2048
ReadX 13607 2160 2048 2048
ReadX 13607 528 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 1312 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 1928 2048 2048
ReadX 13607 528 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 824 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1416 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 352 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 528 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 824 2048 2048
ReadX 13607 384 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 528 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 824 2048 2048
QUERY_FS_INFORMATION 259
ReadX 13607 352 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 768 2048 2048
ReadX 13607 2048 2048 2048
ReadX 13607 352 2048 2048
WriteX 13607 1551 1 1
WriteX 13607 1512 2048 2048
WriteX 13607 1520 2048 2048
WriteX 13607 1528 2048 2048
WriteX 13607 1544 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 2048 2048 2048
WriteX 13607 768 2048 2048
WriteX 13607 344 2048 2048
WriteX 13607 1000 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2048 2048 2048
WriteX 13607 2048 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 1000 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 1240 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 344 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 384 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 768 2048 2048
WriteX 13607 1567 1 1
WriteX 13607 1552 2048 2048
WriteX 13607 1560 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 768 2048 2048
WriteX 13607 344 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 1328 2048 2048
ReadX 13607 0 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 1240 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2200 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 1240 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 344 2048 2048
ReadX 13607 384 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 2048 2048 2048
ReadX 13607 768 2048 2048
WriteX 13607 1583 1 1
WriteX 13607 1568 2048 2048
WriteX 13607 1576 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 2048 2048 2048
WriteX 13607 768 2048 2048
WriteX 13607 344 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 864 2048 2048
ReadX 13607 872 2048 2048
ReadX 13607 912 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 2688 2048 2048
ReadX 13607 1000 2048 2048
WriteX 13607 2688 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 0 2048 2048
ReadX 13607 2944 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 0 2048 2048
Flush 13607
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 2688 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 2688 2048 2048
WriteX 13607 2688 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 392 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 392 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 416 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 416 2048 2048
ReadX 13607 864 2048 2048
ReadX 13607 872 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 3840 2048 2048
ReadX 13607 312 2048 2048
ReadX 13607 888 2048 2048
ReadX 13607 400 2048 2048
ReadX 13607 896 2048 2048
WriteX 13607 1584 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 400 2048 2048
WriteX 13607 416 2048 2048
WriteX 13607 864 2048 2048
WriteX 13607 872 2048 2048
WriteX 13607 888 2048 2048
WriteX 13607 896 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 0 2048 2048
ReadX 13607 584 2048 2048
ReadX 13607 392 2048 2048
WriteX 13607 392 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 1328 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 392 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 0 2048 2048
ReadX 13607 408 2048 2048
ReadX 13607 1328 2048 2048
ReadX 13607 864 2048 2048
ReadX 13607 912 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 3840 2048 2048
ReadX 13607 312 2048 2048
ReadX 13607 1584 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 408 2048 2048
WriteX 13607 912 2048 2048
WriteX 13607 1584 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 0 2048 2048
ReadX 13607 408 2048 2048
ReadX 13607 392 2048 2048
WriteX 13607 392 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 1000 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 528 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 528 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 552 2048 2048
ReadX 13607 1336 2048 2048
WriteX 13607 552 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 0 2048 2048
ReadX 13607 552 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 2664 2048 2048
ReadX 13607 2648 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 2672 2048 2048
ReadX 13607 2656 2048 2048
ReadX 13607 528 2048 2048
ReadX 13607 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13607 528 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 1336 2048 2048
ReadX 13607 2680 2048 2048
ReadX 13607 2760 8192 8192
ReadX 13607 544 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 568 2048 2048
ReadX 13607 544 2048 2048
ReadX 13607 0 2048 2048
Flush 13607
ReadX 13607 2816 6144 6144
ReadX 13607 2760 2048 2048
ReadX 13607 2744 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 2752 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 528 2048 2048
ReadX 13607 528 2048 2048
ReadX 13607 1384 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\INV.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x2 13611
Close 13611
Unlink \clients\client1\~dmtmp\ACCESS\INV.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x2 13613
WriteX 13613 4065 1 1
QUERY_FILE_INFORMATION 13613
WriteX 13613 0 62591 62591
Close 13613
ReadX 13607 0 2048 2048
ReadX 13607 2808 2048 2048
ReadX 13607 2792 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 2800 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 384 2048 2048
ReadX 13607 392 2048 2048
ReadX 13607 1384 2048 2048
ReadX 13607 2432 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\SALES.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x2 13615
Close 13615
Unlink \clients\client1\~dmtmp\ACCESS\SALES.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x2 13617
WriteX 13617 4094 1 1
QUERY_FILE_INFORMATION 13617
WriteX 13617 0 4095 4095
WriteX 13617 0 10845 10845
Close 13617
ReadX 13607 1432 2048 2048
ReadX 13607 1304 2048 2048
ReadX 13607 1368 2048 2048
ReadX 13607 2304 2048 2048
ReadX 13607 1440 2048 2048
ReadX 13607 1424 2048 2048
ReadX 13607 1448 2048 2048
ReadX 13607 1456 2048 2048
ReadX 13607 2432 2048 2048
ReadX 13607 1384 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\LABELS.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x2 13619
Close 13619
Unlink \clients\client1\~dmtmp\ACCESS\LABELS.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x2 13621
ReadX 13607 0 2048 2048
WriteX 13621 4081 1 1
QUERY_FILE_INFORMATION 13621
WriteX 13621 0 30118 30118
Close 13621
ReadX 13607 1344 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 1152 2048 2048
ReadX 13607 1152 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 1000 2048 2048
ReadX 13607 768 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 344 2048 2048
WriteX 13607 1000 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 1416 2048 2048
ReadX 13607 1416 2048 2048
ReadX 13607 344 2048 2048
ReadX 13607 896 2048 2048
WriteX 13607 1538 2 2
WriteX 13607 344 2048 2048
WriteX 13607 1416 2048 2048
WriteX 13607 1538 2 2
ReadX 13607 2048 2048 2048
WriteX 13607 2048 2048 2048
WriteX 13607 1538 2 2
Close 13607
Close 13609
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER.LDB
Unlink \clients\client1\~dmtmp\ACCESS\FASTENER.LDB
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13622
ReadX 13622 0 65471 65471
ReadX 13622 65471 63 63
ReadX 13622 65534 65471 65471
ReadX 13622 131005 63 63
ReadX 13622 131068 65471 65471
ReadX 13622 196539 63 63
ReadX 13622 196602 65471 65471
ReadX 13622 262073 63 63
ReadX 13622 262136 65471 65471
ReadX 13622 327607 63 63
ReadX 13622 327670 10 10
Close 13622
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13623
ReadX 13623 0 65471 65471
ReadX 13623 65471 63 63
ReadX 13623 65534 65471 65471
ReadX 13623 131005 63 63
ReadX 13623 131068 65471 65471
ReadX 13623 196539 63 63
ReadX 13623 196602 65471 65471
ReadX 13623 262073 63 63
ReadX 13623 262136 65471 65471
ReadX 13623 327607 63 63
ReadX 13623 327670 65471 65471
ReadX 13623 393141 63 63
ReadX 13623 393204 65471 65471
ReadX 13623 458675 63 63
ReadX 13623 458738 65471 65471
ReadX 13623 524209 63 63
ReadX 13623 524272 65471 65471
ReadX 13623 589743 63 63
ReadX 13623 589806 65471 65471
ReadX 13623 655277 63 63
ReadX 13623 655340 32 32
Close 13623
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13624
ReadX 13624 0 65471 65471
ReadX 13624 65471 63 63
ReadX 13624 65534 65471 65471
ReadX 13624 131005 63 63
ReadX 13624 131068 65471 65471
ReadX 13624 196539 63 63
ReadX 13624 196602 65471 65471
ReadX 13624 262073 63 63
ReadX 13624 262136 65471 65471
ReadX 13624 327607 63 63
ReadX 13624 327670 65471 65471
ReadX 13624 393141 63 63
ReadX 13624 393204 65471 65471
ReadX 13624 458675 63 63
ReadX 13624 458738 65471 65471
ReadX 13624 524209 63 63
ReadX 13624 524272 65471 65471
ReadX 13624 589743 63 63
ReadX 13624 589806 65471 65471
ReadX 13624 655277 63 63
ReadX 13624 655340 65471 65471
ReadX 13624 720811 63 63
ReadX 13624 720874 65471 65471
ReadX 13624 786345 63 63
ReadX 13624 786408 65471 65471
ReadX 13624 851879 63 63
ReadX 13624 851942 65471 65471
ReadX 13624 917413 63 63
ReadX 13624 917476 65471 65471
ReadX 13624 982947 63 63
ReadX 13624 983010 65471 65471
ReadX 13624 1048481 63 63
ReadX 13624 1048544 65471 65471
ReadX 13624 1114015 63 63
ReadX 13624 1114078 65471 65471
ReadX 13624 1179549 63 63
ReadX 13624 1179612 65471 65471
ReadX 13624 1245083 63 63
ReadX 13624 1245146 65471 65471
ReadX 13624 1310617 63 63
ReadX 13624 1310680 65471 65471
ReadX 13624 1376151 63 63
ReadX 13624 1376214 65471 65471
ReadX 13624 1441685 63 63
ReadX 13624 1441748 65471 65471
ReadX 13624 1507219 63 63
ReadX 13624 1507282 65471 65471
ReadX 13624 1572753 63 63
ReadX 13624 1572816 65471 65471
ReadX 13624 1638287 63 63
ReadX 13624 1638350 65471 65471
ReadX 13624 1703821 63 63
ReadX 13624 1703884 65471 65471
ReadX 13624 1769355 63 63
ReadX 13624 1769418 65471 65471
ReadX 13624 1834889 63 63
ReadX 13624 1834952 32824 32824
Close 13624
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\PCBENCHM 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13625
Close 13625
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13626
ReadX 13626 0 24 24
Close 13626
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13627
QUERY_FILE_INFORMATION 13627
ReadX 13627 0 512 512
ReadX 13627 464 512 512
ReadX 13627 498 512 512
ReadX 13627 472 512 512
ReadX 13627 466 512 512
ReadX 13627 978 512 512
ReadX 13627 497 57 57
Close 13627
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13628
QUERY_FILE_INFORMATION 13628
ReadX 13628 0 512 512
ReadX 13628 464 512 512
ReadX 13628 498 512 512
ReadX 13628 472 512 512
ReadX 13628 462 512 512
ReadX 13628 468 512 512
ReadX 13628 466 512 512
QUERY_FILE_INFORMATION 13628
WriteX 13628 482 60 60
WriteX 13628 482 4 4
QUERY_FILE_INFORMATION 13628
WriteX 13628 482 11 11
ReadX 13628 497 57 57
ReadX 13628 497 57 57
ReadX 13628 368 4096 4096
ReadX 13628 460 512 512
ReadX 13628 512 4096 4096
ReadX 13628 4608 4096 4096
ReadX 13628 8704 4096 4096
ReadX 13628 12800 4096 4096
ReadX 13628 16896 4096 4096
ReadX 13628 20992 4096 4096
ReadX 13628 25088 4096 4096
ReadX 13628 29184 4096 4096
ReadX 13628 33280 4096 4096
ReadX 13628 37376 4096 4096
ReadX 13628 41472 4096 4096
ReadX 13628 45568 4096 4096
ReadX 13628 49664 4096 4096
ReadX 13628 53760 4096 4096
ReadX 13628 57856 4096 4096
ReadX 13628 61952 4096 4096
ReadX 13628 66048 4096 4096
ReadX 13628 70144 4096 4096
ReadX 13628 497 20 20
ReadX 13628 496 103 103
ReadX 13628 500 448 448
ReadX 13628 470 512 512
ReadX 13628 486 2692 2692
ReadX 13628 290 4096 4096
ReadX 13628 4386 4096 4096
ReadX 13628 8482 4096 4096
ReadX 13628 500 20 20
ReadX 13628 483 108 108
ReadX 13628 482 292 292
ReadX 13628 338 4096 4096
ReadX 13628 4434 3103 3103
ReadX 13628 384 28 28
ReadX 13628 412 20 20
ReadX 13628 432 8 8
ReadX 13628 440 136 136
ReadX 13628 576 8 8
ReadX 13628 584 4 4
ReadX 13628 588 4 4
ReadX 13628 592 39 39
ReadX 13628 384 4 4
ReadX 13628 388 4 4
ReadX 13628 392 23 23
ReadX 13628 385 4 4
ReadX 13628 389 4 4
ReadX 13628 393 12 12
ReadX 13628 405 4 4
ReadX 13628 409 4 4
ReadX 13628 413 1 1
ReadX 13628 385 4 4
ReadX 13628 389 4 4
ReadX 13628 393 1 1
ReadX 13628 385 4 4
ReadX 13628 389 4 4
ReadX 13628 393 12 12
ReadX 13628 405 4 4
ReadX 13628 409 4 4
ReadX 13628 413 2 2
ReadX 13628 385 4 4
ReadX 13628 389 4 4
ReadX 13628 393 25 25
ReadX 13628 385 4 4
ReadX 13628 389 8 8
ReadX 13628 397 4 4
ReadX 13628 401 8 8
ReadX 13628 409 4 4
ReadX 13628 413 8 8
ReadX 13628 421 4 4
ReadX 13628 425 8 8
ReadX 13628 433 4 4
ReadX 13628 437 4 4
ReadX 13628 441 4 4
ReadX 13628 445 4 4
ReadX 13628 449 4 4
ReadX 13628 453 4 4
ReadX 13628 457 4 4
ReadX 13628 461 4 4
ReadX 13628 465 10670 10670
ReadX 13628 428 4096 4096
WriteX 13628 498 512 512
WriteX 13628 472 512 512
WriteX 13628 462 512 512
WriteX 13628 468 512 512
Close 13628
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13629
Close 13629
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13630
QUERY_FILE_INFORMATION 13630
ReadX 13630 0 512 512
ReadX 13630 464 512 512
ReadX 13630 498 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 13631
Close 13631
Unlink \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 13630
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 13633
WriteX 13633 4607 1 1
QUERY_FILE_INFORMATION 13633
WriteX 13633 0 65471 65471
WriteX 13633 65471 65 65
WriteX 13633 65536 19979 19979
Close 13633
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13634
QUERY_FILE_INFORMATION 13634
ReadX 13634 0 512 512
ReadX 13634 462 512 512
ReadX 13634 974 512 512
ReadX 13634 1486 512 512
ReadX 13634 460 512 512
QUERY_FILE_INFORMATION 13634
QUERY_FILE_INFORMATION 13634
QUERY_FILE_INFORMATION 13634
WriteX 13634 470 448 448
QUERY_FILE_INFORMATION 13634
WriteX 13634 470 60 60
WriteX 13634 470 4 4
QUERY_FILE_INFORMATION 13634
WriteX 13634 470 11 11
QUERY_FILE_INFORMATION 13634
QUERY_FILE_INFORMATION 13634
WriteX 13634 464 512 512
WriteX 13634 976 512 512
WriteX 13634 1488 512 512
WriteX 13634 462 512 512
WriteX 13634 0 512 512
QUERY_FILE_INFORMATION 13634
QUERY_FILE_INFORMATION 13634
ReadX 13634 470 512 512
WriteX 13634 482 512 512
WriteX 13634 482 292 292
QUERY_FILE_INFORMATION 13634
QUERY_FILE_INFORMATION 13634
WriteX 13634 483 20 20
WriteX 13634 483 108 108
QUERY_FILE_INFORMATION 13634
WriteX 13634 484 448 448
QUERY_FILE_INFORMATION 13634
WriteX 13634 484 44 44
WriteX 13634 484 20 20
WriteX 13634 480 512 512
WriteX 13634 472 512 512
WriteX 13634 476 512 512
WriteX 13634 988 512 512
WriteX 13634 474 512 512
Flush 13634
WriteX 13634 0 512 512
Flush 13634
QUERY_FILE_INFORMATION 13634
QUERY_FILE_INFORMATION 13634
QUERY_FILE_INFORMATION 13634
WriteX 13634 480 512 512
WriteX 13634 472 512 512
WriteX 13634 476 512 512
QUERY_FILE_INFORMATION 13634
WriteX 13634 496 320 320
QUERY_FILE_INFORMATION 13634
WriteX 13634 496 60 60
ReadX 13634 484 512 512
WriteX 13634 500 512 512
WriteX 13634 470 512 512
WriteX 13634 486 2692 2692
QUERY_FILE_INFORMATION 13634
QUERY_FILE_INFORMATION 13634
WriteX 13634 497 25 25
WriteX 13634 496 103 103
QUERY_FILE_INFORMATION 13634
QUERY_FILE_INFORMATION 13634
WriteX 13634 497 44 44
WriteX 13634 497 20 20
WriteX 13634 498 512 512
WriteX 13634 462 512 512
WriteX 13634 466 512 512
WriteX 13634 978 512 512
WriteX 13634 464 512 512
Flush 13634
WriteX 13634 0 512 512
Flush 13634
QUERY_FILE_INFORMATION 13634
QUERY_FILE_INFORMATION 13634
QUERY_FILE_INFORMATION 13634
WriteX 13634 497 7 7
WriteX 13634 497 57 57
WriteX 13634 498 512 512
WriteX 13634 472 512 512
WriteX 13634 462 512 512
WriteX 13634 466 512 512
WriteX 13634 978 512 512
Flush 13634
WriteX 13634 498 512 512
Flush 13634
Close 13634
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13635
QUERY_FILE_INFORMATION 13635
ReadX 13635 0 512 512
ReadX 13635 464 512 512
ReadX 13635 498 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\ZD16.BMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\ZD16.BMP 0x40 0x1 13636
ReadX 13636 0 20 20
ReadX 13636 14 40 40
ReadX 13636 54 64 64
ReadX 13636 118 1152 1152
Close 13636
Close 13635
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13637
Close 13637
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13638
ReadX 13638 0 24 24
Close 13638
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13639
QUERY_FILE_INFORMATION 13639
ReadX 13639 0 512 512
ReadX 13639 464 512 512
ReadX 13639 498 512 512
ReadX 13639 472 512 512
ReadX 13639 462 512 512
ReadX 13639 466 512 512
ReadX 13639 978 512 512
ReadX 13639 497 57 57
Close 13639
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13640
QUERY_FILE_INFORMATION 13640
ReadX 13640 0 512 512
ReadX 13640 464 512 512
ReadX 13640 498 512 512
ReadX 13640 472 512 512
ReadX 13640 468 512 512
ReadX 13640 462 512 512
ReadX 13640 466 512 512
QUERY_FILE_INFORMATION 13640
WriteX 13640 482 60 60
WriteX 13640 482 4 4
QUERY_FILE_INFORMATION 13640
WriteX 13640 482 11 11
WriteX 13640 498 512 512
WriteX 13640 472 512 512
WriteX 13640 462 512 512
WriteX 13640 466 512 512
WriteX 13640 978 512 512
Close 13640
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP 0x40 0x2 13641
Close 13641
Unlink \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x200000 0x1 13642
Close 13642
Rename \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 13644
WriteX 13644 4607 1 1
QUERY_FILE_INFORMATION 13644
WriteX 13644 0 65471 65471
WriteX 13644 65471 65 65
WriteX 13644 65536 17654 17654
Close 13644
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13645
QUERY_FILE_INFORMATION 13645
ReadX 13645 0 512 512
ReadX 13645 474 512 512
ReadX 13645 986 512 512
ReadX 13645 1498 512 512
ReadX 13645 472 512 512
QUERY_FILE_INFORMATION 13645
QUERY_FILE_INFORMATION 13645
QUERY_FILE_INFORMATION 13645
WriteX 13645 482 448 448
QUERY_FILE_INFORMATION 13645
WriteX 13645 482 60 60
WriteX 13645 482 4 4
QUERY_FILE_INFORMATION 13645
WriteX 13645 482 11 11
QUERY_FILE_INFORMATION 13645
QUERY_FILE_INFORMATION 13645
WriteX 13645 476 512 512
WriteX 13645 988 512 512
WriteX 13645 1500 512 512
WriteX 13645 474 512 512
WriteX 13645 0 512 512
QUERY_FILE_INFORMATION 13645
QUERY_FILE_INFORMATION 13645
ReadX 13645 482 512 512
WriteX 13645 494 512 512
WriteX 13645 494 292 292
QUERY_FILE_INFORMATION 13645
QUERY_FILE_INFORMATION 13645
WriteX 13645 495 20 20
WriteX 13645 495 108 108
QUERY_FILE_INFORMATION 13645
WriteX 13645 496 448 448
QUERY_FILE_INFORMATION 13645
WriteX 13645 496 44 44
WriteX 13645 496 20 20
WriteX 13645 492 512 512
WriteX 13645 484 512 512
WriteX 13645 488 512 512
WriteX 13645 1000 512 512
WriteX 13645 486 512 512
Flush 13645
WriteX 13645 0 512 512
Flush 13645
QUERY_FILE_INFORMATION 13645
QUERY_FILE_INFORMATION 13645
QUERY_FILE_INFORMATION 13645
WriteX 13645 492 512 512
WriteX 13645 484 512 512
WriteX 13645 488 512 512
QUERY_FILE_INFORMATION 13645
WriteX 13645 508 320 320
QUERY_FILE_INFORMATION 13645
WriteX 13645 508 60 60
ReadX 13645 496 512 512
WriteX 13645 512 512 512
WriteX 13645 482 512 512
WriteX 13645 498 2692 2692
QUERY_FILE_INFORMATION 13645
QUERY_FILE_INFORMATION 13645
WriteX 13645 509 25 25
WriteX 13645 508 103 103
QUERY_FILE_INFORMATION 13645
QUERY_FILE_INFORMATION 13645
WriteX 13645 509 44 44
WriteX 13645 509 20 20
WriteX 13645 510 512 512
WriteX 13645 474 512 512
WriteX 13645 478 512 512
WriteX 13645 990 512 512
WriteX 13645 476 512 512
Flush 13645
WriteX 13645 0 512 512
Flush 13645
QUERY_FILE_INFORMATION 13645
QUERY_FILE_INFORMATION 13645
QUERY_FILE_INFORMATION 13645
WriteX 13645 509 7 7
WriteX 13645 509 57 57
WriteX 13645 510 512 512
WriteX 13645 484 512 512
WriteX 13645 474 512 512
WriteX 13645 478 512 512
WriteX 13645 990 512 512
Flush 13645
WriteX 13645 510 512 512
Flush 13645
Close 13645
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13646
Close 13646
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13647
QUERY_FILE_INFORMATION 13647
ReadX 13647 0 512 512
ReadX 13647 476 512 512
ReadX 13647 510 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP 0x40 0x1 13648
Close 13648
Unlink \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA 0x40 0x1 13649
QUERY_FILE_INFORMATION 13649
ReadX 13649 0 512 512
ReadX 13649 512 512 512
ReadX 13649 770 512 512
ReadX 13649 1282 512 512
ReadX 13649 1794 512 512
ReadX 13649 2562 512 512
ReadX 13649 3586 512 512
ReadX 13649 3828 512 512
ReadX 13649 288 512 512
ReadX 13649 1024 512 512
ReadX 13649 954 512 512
ReadX 13649 295 512 512
ReadX 13649 320 512 512
ReadX 13649 322 512 512
ReadX 13649 834 512 512
ReadX 13649 1346 512 512
ReadX 13649 1858 512 512
ReadX 13649 323 512 512
ReadX 13649 835 512 512
ReadX 13649 1347 512 512
ReadX 13649 1859 512 512
ReadX 13649 2371 345 345
ReadX 13649 322 167 167
ReadX 13649 489 512 512
ReadX 13649 1001 512 512
ReadX 13649 1513 512 512
ReadX 13649 2025 512 512
ReadX 13649 2537 512 512
ReadX 13649 3049 512 512
ReadX 13649 3561 345 345
ReadX 13649 323 167 167
ReadX 13649 490 512 512
ReadX 13649 1002 512 512
ReadX 13649 1514 512 512
ReadX 13649 2026 512 512
ReadX 13649 2538 512 512
ReadX 13649 3050 512 512
ReadX 13649 3562 512 512
ReadX 13649 4074 512 512
ReadX 13649 4586 512 512
ReadX 13649 5098 512 512
ReadX 13649 5610 512 512
ReadX 13649 6122 512 512
ReadX 13649 6634 512 512
ReadX 13649 7146 512 512
ReadX 13649 7658 512 512
ReadX 13649 8170 512 512
ReadX 13649 8682 512 512
ReadX 13649 9194 512 512
ReadX 13649 9706 512 512
ReadX 13649 10218 512 512
ReadX 13649 10730 345 345
ReadX 13649 11075 512 512
ReadX 13649 11587 167 167
ReadX 13649 11754 512 512
ReadX 13649 12266 512 512
ReadX 13649 12778 512 512
ReadX 13649 13290 512 512
ReadX 13649 13802 512 512
ReadX 13649 14314 512 512
ReadX 13649 14826 512 512
ReadX 13649 15338 512 512
ReadX 13649 337 512 512
ReadX 13649 337 512 512
ReadX 13649 849 34 34
ReadX 13649 352 512 512
ReadX 13649 864 512 512
ReadX 13649 1376 512 512
ReadX 13649 1888 512 512
ReadX 13649 2400 512 512
ReadX 13649 2912 512 512
ReadX 13649 3424 512 512
ReadX 13649 3936 512 512
ReadX 13649 1632 512 512
ReadX 13649 2144 512 512
ReadX 13649 1682 512 512
ReadX 13649 258 512 512
ReadX 13649 360 144 144
ReadX 13649 2517 512 512
ReadX 13649 3029 512 512
ReadX 13649 1751 512 512
ReadX 13649 2263 512 512
ReadX 13649 2775 512 512
ReadX 13649 3287 512 512
ReadX 13649 3799 512 512
ReadX 13649 4311 512 512
ReadX 13649 4823 512 512
ReadX 13649 5335 512 512
ReadX 13649 5847 512 512
ReadX 13649 6359 512 512
ReadX 13649 6871 512 512
ReadX 13649 7383 512 512
ReadX 13649 7895 512 512
ReadX 13649 8407 512 512
ReadX 13649 8919 512 512
ReadX 13649 9431 512 512
ReadX 13649 9943 512 512
ReadX 13649 10455 512 512
ReadX 13649 10967 512 512
ReadX 13649 11479 512 512
ReadX 13649 2556 512 512
ReadX 13649 3068 512 512
ReadX 13649 3580 512 512
ReadX 13649 4092 512 512
ReadX 13649 4604 512 512
ReadX 13649 5116 512 512
ReadX 13649 5628 512 512
ReadX 13649 6140 512 512
ReadX 13649 6652 512 512
ReadX 13649 7164 512 512
ReadX 13649 7676 512 512
ReadX 13649 8188 512 512
ReadX 13649 8700 512 512
ReadX 13649 9212 512 512
ReadX 13649 9724 512 512
ReadX 13649 10236 512 512
ReadX 13649 10748 512 512
ReadX 13649 11260 512 512
ReadX 13649 11772 512 512
ReadX 13649 12284 512 512
ReadX 13649 12796 49 49
ReadX 13649 260 463 463
ReadX 13649 723 512 512
ReadX 13649 1235 512 512
ReadX 13649 1747 512 512
ReadX 13649 2259 512 512
ReadX 13649 2771 512 512
ReadX 13649 3283 512 512
ReadX 13649 3795 512 512
ReadX 13649 4307 512 512
ReadX 13649 4819 512 512
ReadX 13649 5331 512 512
ReadX 13649 5843 512 512
ReadX 13649 6355 512 512
ReadX 13649 6867 512 512
ReadX 13649 7379 512 512
ReadX 13649 7891 512 512
ReadX 13649 8403 512 512
ReadX 13649 8915 512 512
ReadX 13649 9427 512 512
ReadX 13649 9939 512 512
ReadX 13649 10451 512 512
ReadX 13649 10963 402 402
ReadX 13649 593 240 240
ReadX 13649 2048 272 272
ReadX 13649 2320 512 512
ReadX 13649 2832 512 512
ReadX 13649 3344 512 512
ReadX 13649 3856 512 512
ReadX 13649 4368 512 512
ReadX 13649 4880 512 512
ReadX 13649 5392 240 240
ReadX 13649 608 272 272
ReadX 13649 880 512 512
ReadX 13649 1392 512 512
ReadX 13649 1904 512 512
ReadX 13649 2416 512 512
ReadX 13649 2928 512 512
ReadX 13649 3440 512 512
ReadX 13649 3952 512 512
ReadX 13649 4464 512 512
ReadX 13649 4976 512 512
ReadX 13649 5488 512 512
ReadX 13649 6000 512 512
ReadX 13649 6512 512 512
ReadX 13649 7024 512 512
ReadX 13649 7536 512 512
ReadX 13649 8048 512 512
ReadX 13649 8560 512 512
ReadX 13649 9072 512 512
ReadX 13649 9584 512 512
ReadX 13649 10096 512 512
ReadX 13649 1683 512 512
ReadX 13649 514 512 512
ReadX 13649 620 512 512
ReadX 13649 770 512 512
ReadX 13649 1282 512 512
ReadX 13649 1794 512 512
ReadX 13649 2000 512 512
ReadX 13649 1434 512 512
ReadX 13649 2050 512 512
ReadX 13649 2118 512 512
ReadX 13649 1715 512 512
ReadX 13649 1024 512 512
ReadX 13649 954 512 512
ReadX 13649 1880 512 512
ReadX 13649 1286 512 512
ReadX 13649 1510 512 512
ReadX 13649 2562 512 512
ReadX 13649 2610 512 512
ReadX 13649 3586 512 512
ReadX 13649 3812 512 512
ReadX 13649 3828 512 512
ReadX 13649 4046 512 512
ReadX 13649 4066 512 512
ReadX 13649 1747 512 512
ReadX 13649 1026 512 512
ReadX 13649 1538 512 512
ReadX 13649 514 512 512
ReadX 13649 751 512 512
ReadX 13649 1263 512 512
ReadX 13649 620 512 512
ReadX 13649 1132 512 512
ReadX 13649 1644 512 512
ReadX 13649 2156 512 512
ReadX 13649 2668 512 512
ReadX 13649 3180 512 512
ReadX 13649 3692 512 512
ReadX 13649 4204 394 394
ReadX 13649 606 118 118
ReadX 13649 724 512 512
ReadX 13649 1236 512 512
ReadX 13649 1748 512 512
ReadX 13649 2260 512 512
ReadX 13649 2772 512 512
ReadX 13649 3284 512 512
ReadX 13649 3796 394 394
ReadX 13649 636 118 118
ReadX 13649 754 512 512
ReadX 13649 1266 512 512
ReadX 13649 1778 512 512
ReadX 13649 2290 512 512
ReadX 13649 2802 512 512
ReadX 13649 3314 512 512
ReadX 13649 3826 512 512
ReadX 13649 4338 512 512
ReadX 13649 4850 512 512
ReadX 13649 5362 512 512
ReadX 13649 5874 512 512
ReadX 13649 6386 512 512
ReadX 13649 6898 512 512
ReadX 13649 7410 512 512
ReadX 13649 7922 512 512
ReadX 13649 8434 512 512
ReadX 13649 8946 512 512
ReadX 13649 9458 512 512
ReadX 13649 9970 512 512
ReadX 13649 10482 512 512
ReadX 13649 723 512 512
ReadX 13649 1235 512 512
ReadX 13649 725 512 512
ReadX 13649 729 512 512
ReadX 13649 1241 512 512
ReadX 13649 1753 512 512
ReadX 13649 2265 512 512
ReadX 13649 2777 512 512
ReadX 13649 3289 512 512
ReadX 13649 3801 512 512
ReadX 13649 4313 512 512
ReadX 13649 4825 512 512
ReadX 13649 5337 512 512
ReadX 13649 5849 512 512
ReadX 13649 6361 512 512
ReadX 13649 755 512 512
ReadX 13649 1267 512 512
ReadX 13649 1779 512 512
ReadX 13649 2291 512 512
ReadX 13649 2803 512 512
ReadX 13649 3315 512 512
ReadX 13649 3827 512 512
ReadX 13649 4339 244 244
ReadX 13649 4583 512 512
ReadX 13649 5095 268 268
ReadX 13649 5363 512 512
ReadX 13649 5875 512 512
ReadX 13649 6387 512 512
ReadX 13649 6899 512 512
ReadX 13649 7411 512 512
ReadX 13649 7923 512 512
ReadX 13649 8435 512 512
ReadX 13649 8947 512 512
ReadX 13649 9459 512 512
ReadX 13649 9971 512 512
ReadX 13649 10483 512 512
ReadX 13649 10995 512 512
ReadX 13649 11507 512 512
ReadX 13649 12019 512 512
ReadX 13649 12531 512 512
ReadX 13649 13043 512 512
ReadX 13649 13555 512 512
ReadX 13649 14067 512 512
ReadX 13649 14579 512 512
ReadX 13649 15091 512 512
ReadX 13649 15603 342 342
ReadX 13649 725 512 512
ReadX 13649 2000 512 512
ReadX 13649 3918 512 512
ReadX 13649 727 512 512
ReadX 13649 258 512 512
ReadX 13649 376 512 512
ReadX 13649 1109 512 512
ReadX 13649 1028 512 512
ReadX 13649 1540 512 512
ReadX 13649 2052 512 512
ReadX 13649 2564 512 512
ReadX 13649 3076 512 512
ReadX 13649 3588 512 512
ReadX 13649 4100 512 512
ReadX 13649 4612 412 412
ReadX 13649 1012 100 100
ReadX 13649 1112 512 512
ReadX 13649 1624 512 512
ReadX 13649 2136 512 512
ReadX 13649 2648 512 512
ReadX 13649 3160 512 512
ReadX 13649 3672 512 512
ReadX 13649 4184 412 412
ReadX 13649 1044 100 100
ReadX 13649 1144 512 512
ReadX 13649 1656 512 512
ReadX 13649 2168 512 512
ReadX 13649 2680 512 512
ReadX 13649 3192 512 512
ReadX 13649 3704 512 512
ReadX 13649 4216 512 512
ReadX 13649 4728 512 512
ReadX 13649 5240 512 512
ReadX 13649 5752 512 512
ReadX 13649 6264 512 512
ReadX 13649 6776 512 512
QUERY_FS_INFORMATION 259
ReadX 13649 7288 512 512
ReadX 13649 7800 512 512
ReadX 13649 8312 512 512
ReadX 13649 8824 512 512
ReadX 13649 9336 512 512
ReadX 13649 9848 512 512
ReadX 13649 10360 512 512
ReadX 13649 10872 512 512
ReadX 13649 11384 512 512
ReadX 13649 11896 512 512
ReadX 13649 12408 512 512
ReadX 13649 1088 512 512
ReadX 13649 1600 512 512
ReadX 13649 1090 512 512
ReadX 13649 1094 512 512
ReadX 13649 1606 512 512
ReadX 13649 2118 512 512
ReadX 13649 2630 512 512
ReadX 13649 3142 512 512
ReadX 13649 3654 512 512
ReadX 13649 4166 512 512
ReadX 13649 4678 512 512
ReadX 13649 1111 512 512
ReadX 13649 1623 512 512
ReadX 13649 2135 512 512
ReadX 13649 2647 512 512
ReadX 13649 3159 512 512
ReadX 13649 3671 512 512
ReadX 13649 4183 512 512
ReadX 13649 4695 512 512
ReadX 13649 5207 512 512
ReadX 13649 5719 512 512
ReadX 13649 6231 512 512
ReadX 13649 6743 512 512
ReadX 13649 7255 512 512
ReadX 13649 7767 512 512
ReadX 13649 8279 512 512
ReadX 13649 8791 512 512
ReadX 13649 9303 512 512
ReadX 13649 9815 512 512
ReadX 13649 10327 512 512
ReadX 13649 10839 512 512
ReadX 13649 11351 294 294
ReadX 13649 1091 512 512
ReadX 13649 970 512 512
ReadX 13649 1093 512 512
ReadX 13649 1434 512 512
ReadX 13649 2050 512 512
ReadX 13649 2158 512 512
ReadX 13649 2118 512 512
ReadX 13649 2630 512 512
ReadX 13649 3142 512 512
ReadX 13649 3654 512 512
ReadX 13649 4166 512 512
ReadX 13649 4678 512 512
ReadX 13649 5190 512 512
ReadX 13649 5702 382 382
ReadX 13649 2104 130 130
ReadX 13649 2234 512 512
ReadX 13649 2746 512 512
ReadX 13649 3258 512 512
ReadX 13649 3770 512 512
ReadX 13649 4282 512 512
ReadX 13649 4794 512 512
ReadX 13649 5306 382 382
ReadX 13649 2134 130 130
ReadX 13649 2264 512 512
ReadX 13649 2776 512 512
ReadX 13649 3288 512 512
ReadX 13649 3800 512 512
ReadX 13649 4312 512 512
ReadX 13649 4824 512 512
ReadX 13649 5336 512 512
ReadX 13649 2147 512 512
ReadX 13649 2149 512 512
ReadX 13649 2152 512 512
ReadX 13649 2664 512 512
ReadX 13649 3176 512 512
ReadX 13649 3688 512 512
ReadX 13649 2159 512 512
ReadX 13649 2671 512 512
ReadX 13649 3183 512 512
ReadX 13649 3695 512 512
ReadX 13649 4207 512 512
ReadX 13649 4719 512 512
ReadX 13649 5231 512 512
ReadX 13649 5743 512 512
ReadX 13649 6255 512 512
ReadX 13649 6767 512 512
ReadX 13649 7279 512 512
ReadX 13649 7791 512 512
ReadX 13649 8303 512 512
ReadX 13649 8815 512 512
ReadX 13649 9327 512 512
ReadX 13649 9839 512 512
ReadX 13649 10351 512 512
ReadX 13649 10863 512 512
ReadX 13649 11375 512 512
ReadX 13649 11887 512 512
ReadX 13649 12399 38 38
ReadX 13649 2149 512 512
ReadX 13649 1794 512 512
ReadX 13649 2016 512 512
ReadX 13649 2151 512 512
ReadX 13649 1918 512 512
ReadX 13649 1880 512 512
ReadX 13649 2392 512 512
ReadX 13649 2904 512 512
ReadX 13649 3416 512 512
ReadX 13649 3928 512 512
ReadX 13649 4440 512 512
ReadX 13649 4952 512 512
ReadX 13649 5464 416 416
ReadX 13649 1866 96 96
ReadX 13649 1962 512 512
ReadX 13649 2474 512 512
ReadX 13649 2986 512 512
ReadX 13649 3498 512 512
ReadX 13649 4010 512 512
ReadX 13649 4522 512 512
ReadX 13649 5034 416 416
ReadX 13649 1896 96 96
ReadX 13649 1992 512 512
ReadX 13649 2504 512 512
ReadX 13649 3016 512 512
ReadX 13649 3528 512 512
ReadX 13649 1903 512 512
ReadX 13649 1905 512 512
ReadX 13649 1908 512 512
ReadX 13649 2420 512 512
ReadX 13649 2932 512 512
ReadX 13649 3444 512 512
ReadX 13649 3956 512 512
ReadX 13649 1919 512 512
ReadX 13649 2431 512 512
ReadX 13649 2943 512 512
ReadX 13649 3455 512 512
ReadX 13649 3967 512 512
ReadX 13649 4479 512 512
ReadX 13649 4991 512 512
ReadX 13649 5503 512 512
ReadX 13649 6015 512 512
ReadX 13649 6527 512 512
ReadX 13649 7039 512 512
ReadX 13649 7551 512 512
ReadX 13649 8063 512 512
ReadX 13649 8575 512 512
ReadX 13649 9087 512 512
ReadX 13649 9599 512 512
ReadX 13649 10111 512 512
ReadX 13649 10623 512 512
ReadX 13649 11135 512 512
ReadX 13649 11647 512 512
ReadX 13649 12159 322 322
ReadX 13649 1905 512 512
ReadX 13649 1846 512 512
ReadX 13649 1907 512 512
ReadX 13649 1860 268 268
ReadX 13649 1832 244 244
ReadX 13649 1846 512 512
ReadX 13649 2358 512 512
ReadX 13649 2870 512 512
ReadX 13649 3382 512 512
ReadX 13649 3894 512 512
ReadX 13649 4406 512 512
ReadX 13649 4918 512 512
ReadX 13649 1858 512 512
ReadX 13649 1859 512 512
ReadX 13649 1860 488 488
ReadX 13649 1832 24 24
ReadX 13649 1861 228 228
ReadX 13649 1832 284 284
ReadX 13649 2116 512 512
ReadX 13649 2628 512 512
ReadX 13649 3140 512 512
ReadX 13649 3652 512 512
ReadX 13649 4164 512 512
ReadX 13649 4676 512 512
ReadX 13649 5188 228 228
ReadX 13649 1862 284 284
ReadX 13649 2146 512 512
ReadX 13649 2658 38 38
ReadX 13649 1859 512 512
ReadX 13649 2047 512 512
ReadX 13649 2016 512 512
ReadX 13649 2528 512 512
ReadX 13649 3040 512 512
ReadX 13649 3552 512 512
ReadX 13649 4064 512 512
ReadX 13649 4576 512 512
ReadX 13649 5088 512 512
ReadX 13649 5600 424 424
ReadX 13649 2002 88 88
ReadX 13649 2090 512 512
ReadX 13649 2602 512 512
ReadX 13649 3114 512 512
ReadX 13649 3626 512 512
ReadX 13649 4138 512 512
ReadX 13649 4650 512 512
ReadX 13649 5162 424 424
ReadX 13649 2032 88 88
ReadX 13649 2120 512 512
ReadX 13649 2632 512 512
ReadX 13649 3144 512 512
ReadX 13649 3656 512 512
ReadX 13649 4168 512 512
ReadX 13649 4680 512 512
ReadX 13649 5192 512 512
ReadX 13649 2044 512 512
ReadX 13649 2045 512 512
ReadX 13649 2046 512 512
ReadX 13649 2047 512 512
ReadX 13649 2559 110 110
ReadX 13649 2052 402 402
ReadX 13649 2454 512 512
ReadX 13649 2966 512 512
ReadX 13649 3478 512 512
ReadX 13649 3990 512 512
ReadX 13649 4502 512 512
ReadX 13649 5014 512 512
ReadX 13649 5526 512 512
ReadX 13649 6038 512 512
ReadX 13649 6550 512 512
ReadX 13649 7062 512 512
ReadX 13649 7574 512 512
ReadX 13649 8086 512 512
ReadX 13649 8598 512 512
ReadX 13649 9110 512 512
ReadX 13649 9622 512 512
ReadX 13649 10134 512 512
ReadX 13649 10646 512 512
ReadX 13649 11158 512 512
ReadX 13649 11670 512 512
ReadX 13649 12182 512 512
ReadX 13649 12694 118 118
ReadX 13649 2045 512 512
ReadX 13649 1282 512 512
ReadX 13649 1343 512 512
ReadX 13649 1286 512 512
ReadX 13649 1798 512 512
ReadX 13649 2310 512 512
ReadX 13649 2822 512 512
ReadX 13649 3334 512 512
ReadX 13649 3846 512 512
ReadX 13649 4358 512 512
ReadX 13649 4870 416 416
ReadX 13649 1270 96 96
ReadX 13649 1366 512 512
ReadX 13649 1878 512 512
ReadX 13649 2390 512 512
ReadX 13649 2902 512 512
ReadX 13649 3414 512 512
ReadX 13649 3926 416 416
ReadX 13649 1284 96 96
ReadX 13649 1380 416 416
ReadX 13649 1302 96 96
ReadX 13649 1398 512 512
ReadX 13649 1910 512 512
ReadX 13649 2422 512 512
ReadX 13649 2934 512 512
ReadX 13649 3446 512 512
ReadX 13649 3958 512 512
ReadX 13649 4470 512 512
ReadX 13649 4982 512 512
ReadX 13649 5494 512 512
ReadX 13649 6006 512 512
ReadX 13649 6518 512 512
ReadX 13649 7030 512 512
ReadX 13649 7542 512 512
ReadX 13649 1328 512 512
ReadX 13649 1330 512 512
ReadX 13649 1333 512 512
ReadX 13649 1845 512 512
ReadX 13649 2357 512 512
ReadX 13649 2869 512 512
ReadX 13649 3381 512 512
ReadX 13649 1344 512 512
ReadX 13649 1856 512 512
ReadX 13649 2368 512 512
ReadX 13649 2880 512 512
ReadX 13649 3392 512 512
ReadX 13649 3904 512 512
ReadX 13649 4416 512 512
ReadX 13649 4928 512 512
ReadX 13649 5440 512 512
ReadX 13649 5952 512 512
ReadX 13649 6464 512 512
ReadX 13649 6976 512 512
ReadX 13649 7488 512 512
ReadX 13649 8000 512 512
ReadX 13649 8512 512 512
ReadX 13649 9024 512 512
ReadX 13649 9536 512 512
ReadX 13649 10048 512 512
ReadX 13649 10560 512 512
ReadX 13649 11072 512 512
ReadX 13649 11584 426 426
ReadX 13649 1330 512 512
ReadX 13649 1842 512 512
ReadX 13649 1250 512 512
ReadX 13649 1264 268 268
ReadX 13649 1236 244 244
ReadX 13649 1250 512 512
ReadX 13649 1762 512 512
ReadX 13649 2274 512 512
ReadX 13649 2786 512 512
ReadX 13649 3298 512 512
ReadX 13649 3810 512 512
ReadX 13649 4322 512 512
ReadX 13649 1262 512 512
ReadX 13649 1263 512 512
ReadX 13649 1264 488 488
ReadX 13649 1236 24 24
ReadX 13649 1265 228 228
ReadX 13649 1236 284 284
ReadX 13649 1520 512 512
ReadX 13649 2032 512 512
ReadX 13649 2544 512 512
ReadX 13649 3056 512 512
ReadX 13649 3568 512 512
ReadX 13649 4080 512 512
ReadX 13649 4592 228 228
ReadX 13649 1266 284 284
ReadX 13649 1550 512 512
ReadX 13649 2062 42 42
ReadX 13649 1263 512 512
ReadX 13649 1538 512 512
ReadX 13649 1640 512 512
ReadX 13649 1510 512 512
ReadX 13649 2022 512 512
ReadX 13649 2534 512 512
ReadX 13649 3046 512 512
ReadX 13649 3558 512 512
ReadX 13649 4070 512 512
ReadX 13649 4582 512 512
ReadX 13649 5094 408 408
ReadX 13649 1496 104 104
ReadX 13649 1600 512 512
ReadX 13649 2112 512 512
ReadX 13649 2624 512 512
ReadX 13649 3136 512 512
ReadX 13649 3648 512 512
ReadX 13649 4160 512 512
ReadX 13649 4672 408 408
ReadX 13649 1526 104 104
ReadX 13649 1630 512 512
ReadX 13649 2142 512 512
ReadX 13649 2654 512 512
ReadX 13649 3166 512 512
ReadX 13649 3678 512 512
ReadX 13649 4190 408 408
ReadX 13649 1540 104 104
ReadX 13649 1644 512 512
ReadX 13649 2156 512 512
ReadX 13649 2668 512 512
ReadX 13649 3180 512 512
ReadX 13649 3692 512 512
ReadX 13649 4204 512 512
ReadX 13649 4716 512 512
ReadX 13649 5228 512 512
ReadX 13649 5740 512 512
ReadX 13649 6252 512 512
ReadX 13649 6764 512 512
ReadX 13649 7276 512 512
ReadX 13649 7788 512 512
ReadX 13649 8300 512 512
ReadX 13649 8812 512 512
ReadX 13649 9324 512 512
ReadX 13649 9836 512 512
ReadX 13649 10348 512 512
ReadX 13649 10860 512 512
ReadX 13649 11372 512 512
ReadX 13649 1615 512 512
ReadX 13649 2127 512 512
ReadX 13649 1617 512 512
ReadX 13649 1621 512 512
ReadX 13649 2133 512 512
ReadX 13649 2645 512 512
ReadX 13649 3157 512 512
ReadX 13649 3669 512 512
ReadX 13649 4181 512 512
ReadX 13649 4693 512 512
ReadX 13649 5205 512 512
ReadX 13649 5717 512 512
ReadX 13649 6229 512 512
ReadX 13649 1641 512 512
ReadX 13649 2153 512 512
ReadX 13649 2665 512 512
ReadX 13649 3177 512 512
ReadX 13649 3689 512 512
ReadX 13649 4201 512 512
ReadX 13649 4713 512 512
ReadX 13649 5225 512 512
ReadX 13649 5737 512 512
ReadX 13649 6249 512 512
ReadX 13649 6761 512 512
ReadX 13649 7273 512 512
ReadX 13649 7785 512 512
ReadX 13649 8297 512 512
ReadX 13649 8809 512 512
ReadX 13649 9321 512 512
ReadX 13649 9833 512 512
ReadX 13649 10345 512 512
ReadX 13649 10857 512 512
ReadX 13649 11369 512 512
ReadX 13649 11881 2 2
ReadX 13649 1796 510 510
ReadX 13649 2306 512 512
ReadX 13649 2818 512 512
ReadX 13649 3330 512 512
ReadX 13649 3842 512 512
ReadX 13649 4354 512 512
ReadX 13649 4866 512 512
ReadX 13649 5378 512 512
ReadX 13649 5890 512 512
ReadX 13649 6402 512 512
ReadX 13649 6914 512 512
ReadX 13649 7426 512 512
ReadX 13649 7938 512 512
ReadX 13649 8450 512 512
ReadX 13649 8962 512 512
ReadX 13649 9474 512 512
ReadX 13649 9986 512 512
ReadX 13649 10498 326 326
ReadX 13649 1617 512 512
ReadX 13649 2129 512 512
ReadX 13649 1450 512 512
ReadX 13649 1621 512 512
ReadX 13649 1446 512 512
ReadX 13649 1450 512 512
ReadX 13649 1962 512 512
ReadX 13649 2474 512 512
ReadX 13649 2986 512 512
ReadX 13649 3498 512 512
ReadX 13649 4010 512 512
ReadX 13649 4522 512 512
ReadX 13649 5034 424 424
ReadX 13649 1436 88 88
ReadX 13649 1524 512 512
ReadX 13649 2036 512 512
ReadX 13649 2548 512 512
ReadX 13649 3060 512 512
ReadX 13649 1442 512 512
ReadX 13649 1443 512 512
ReadX 13649 1444 512 512
ReadX 13649 1446 512 512
ReadX 13649 1958 386 386
ReadX 13649 1466 126 126
ReadX 13649 1592 512 512
ReadX 13649 2104 512 512
ReadX 13649 2616 512 512
ReadX 13649 3128 512 512
ReadX 13649 3640 512 512
ReadX 13649 4152 512 512
ReadX 13649 4664 512 512
ReadX 13649 5176 512 512
ReadX 13649 5688 512 512
ReadX 13649 6200 512 512
ReadX 13649 6712 512 512
ReadX 13649 7224 512 512
ReadX 13649 7736 512 512
ReadX 13649 8248 512 512
ReadX 13649 8760 294 294
ReadX 13649 1443 512 512
ReadX 13649 964 512 512
ReadX 13649 970 512 512
ReadX 13649 1482 512 512
ReadX 13649 1994 512 512
ReadX 13649 2506 512 512
ReadX 13649 3018 512 512
ReadX 13649 3530 512 512
ReadX 13649 4042 512 512
ReadX 13649 4554 424 424
ReadX 13649 956 88 88
ReadX 13649 1044 512 512
ReadX 13649 1556 512 512
ReadX 13649 2068 512 512
ReadX 13649 2580 512 512
ReadX 13649 962 512 512
ReadX 13649 963 512 512
ReadX 13649 964 512 512
ReadX 13649 965 512 512
ReadX 13649 1477 512 512
ReadX 13649 1989 228 228
ReadX 13649 986 284 284
ReadX 13649 1270 512 512
ReadX 13649 1782 512 512
ReadX 13649 2294 512 512
ReadX 13649 2806 512 512
ReadX 13649 3318 512 512
ReadX 13649 3830 512 512
ReadX 13649 4342 512 512
ReadX 13649 4854 512 512
ReadX 13649 5366 512 512
ReadX 13649 5878 512 512
ReadX 13649 6390 512 512
ReadX 13649 6902 512 512
ReadX 13649 7414 42 42
ReadX 13649 963 512 512
ReadX 13649 2610 512 512
ReadX 13649 3812 512 512
ReadX 13649 3828 512 512
ReadX 13649 3969 512 512
ReadX 13649 3918 512 512
ReadX 13649 4430 512 512
ReadX 13649 4942 512 512
ReadX 13649 5454 512 512
ReadX 13649 5966 512 512
ReadX 13649 6478 512 512
ReadX 13649 6990 512 512
ReadX 13649 7502 424 424
ReadX 13649 3904 88 88
ReadX 13649 3992 512 512
ReadX 13649 4504 512 512
ReadX 13649 5016 512 512
ReadX 13649 5528 512 512
ReadX 13649 6040 512 512
ReadX 13649 6552 512 512
ReadX 13649 7064 424 424
ReadX 13649 3934 88 88
ReadX 13649 4022 512 512
ReadX 13649 4534 512 512
ReadX 13649 5046 512 512
ReadX 13649 5558 512 512
ReadX 13649 6070 512 512
ReadX 13649 6582 512 512
ReadX 13649 7094 512 512
ReadX 13649 7606 512 512
ReadX 13649 8118 512 512
ReadX 13649 8630 512 512
ReadX 13649 3953 512 512
ReadX 13649 4465 512 512
ReadX 13649 3956 512 512
ReadX 13649 3964 512 512
ReadX 13649 4476 512 512
ReadX 13649 4988 512 512
ReadX 13649 3970 512 512
ReadX 13649 4482 512 512
ReadX 13649 4994 512 512
ReadX 13649 5506 512 512
ReadX 13649 6018 512 512
ReadX 13649 6530 512 512
ReadX 13649 7042 512 512
ReadX 13649 7554 512 512
ReadX 13649 8066 512 512
ReadX 13649 8578 512 512
ReadX 13649 9090 512 512
ReadX 13649 9602 512 512
ReadX 13649 10114 512 512
ReadX 13649 10626 512 512
ReadX 13649 11138 512 512
ReadX 13649 11650 512 512
ReadX 13649 12162 512 512
ReadX 13649 12674 512 512
ReadX 13649 13186 512 512
ReadX 13649 13698 512 512
ReadX 13649 14210 134 134
ReadX 13649 3956 512 512
ReadX 13649 4468 512 512
ReadX 13649 4980 512 512
ReadX 13649 5492 512 512
ReadX 13649 3074 512 512
ReadX 13649 3246 512 512
ReadX 13649 3964 512 512
ReadX 13649 3330 512 512
ReadX 13649 3465 512 512
ReadX 13649 3246 512 512
ReadX 13649 3758 512 512
ReadX 13649 4270 512 512
ReadX 13649 4782 512 512
ReadX 13649 5294 512 512
ReadX 13649 5806 512 512
ReadX 13649 6318 512 512
ReadX 13649 6830 368 368
ReadX 13649 3232 144 144
ReadX 13649 3376 512 512
ReadX 13649 3888 512 512
ReadX 13649 4400 512 512
ReadX 13649 4912 512 512
ReadX 13649 5424 512 512
ReadX 13649 5936 512 512
ReadX 13649 6448 368 368
ReadX 13649 3262 144 144
ReadX 13649 3406 512 512
ReadX 13649 3918 512 512
ReadX 13649 4430 512 512
ReadX 13649 4942 512 512
ReadX 13649 5454 512 512
ReadX 13649 5966 512 512
ReadX 13649 6478 512 512
ReadX 13649 6990 512 512
ReadX 13649 7502 512 512
ReadX 13649 8014 512 512
ReadX 13649 8526 512 512
ReadX 13649 9038 512 512
ReadX 13649 9550 512 512
ReadX 13649 10062 512 512
ReadX 13649 10574 512 512
ReadX 13649 11086 512 512
ReadX 13649 11598 512 512
ReadX 13649 12110 512 512
ReadX 13649 12622 512 512
ReadX 13649 13134 512 512
ReadX 13649 13646 368 368
ReadX 13649 3332 144 144
ReadX 13649 3476 512 512
ReadX 13649 3988 512 512
ReadX 13649 4500 512 512
ReadX 13649 5012 512 512
ReadX 13649 5524 512 512
ReadX 13649 6036 512 512
ReadX 13649 6548 512 512
ReadX 13649 7060 512 512
ReadX 13649 7572 512 512
ReadX 13649 8084 512 512
ReadX 13649 8596 512 512
ReadX 13649 9108 512 512
ReadX 13649 9620 512 512
ReadX 13649 10132 512 512
ReadX 13649 10644 512 512
ReadX 13649 11156 512 512
ReadX 13649 11668 512 512
ReadX 13649 12180 512 512
ReadX 13649 12692 512 512
ReadX 13649 13204 512 512
ReadX 13649 3430 512 512
ReadX 13649 3942 512 512
ReadX 13649 3434 512 512
ReadX 13649 3435 512 512
ReadX 13649 3947 512 512
ReadX 13649 4459 512 512
ReadX 13649 4971 512 512
ReadX 13649 5483 512 512
ReadX 13649 5995 512 512
ReadX 13649 6507 512 512
ReadX 13649 7019 512 512
ReadX 13649 7531 512 512
ReadX 13649 8043 512 512
ReadX 13649 8555 512 512
ReadX 13649 9067 512 512
ReadX 13649 9579 512 512
ReadX 13649 10091 512 512
ReadX 13649 10603 512 512
ReadX 13649 11115 512 512
ReadX 13649 3467 512 512
ReadX 13649 3979 512 512
ReadX 13649 4491 512 512
ReadX 13649 5003 512 512
ReadX 13649 5515 512 512
ReadX 13649 6027 512 512
ReadX 13649 6539 512 512
ReadX 13649 7051 512 512
ReadX 13649 7563 512 512
ReadX 13649 8075 512 512
ReadX 13649 8587 512 512
ReadX 13649 9099 512 512
ReadX 13649 9611 512 512
ReadX 13649 10123 512 512
ReadX 13649 10635 512 512
ReadX 13649 11147 512 512
ReadX 13649 11659 512 512
ReadX 13649 12171 512 512
ReadX 13649 12683 512 512
ReadX 13649 13195 512 512
ReadX 13649 13707 56 56
ReadX 13649 13763 512 512
ReadX 13649 14275 456 456
ReadX 13649 14731 512 512
ReadX 13649 15243 512 512
ReadX 13649 15755 512 512
ReadX 13649 16267 512 512
ReadX 13649 16779 512 512
ReadX 13649 17291 512 512
ReadX 13649 17803 512 512
ReadX 13649 18315 512 512
ReadX 13649 18827 512 512
ReadX 13649 19339 512 512
ReadX 13649 19851 512 512
ReadX 13649 20363 512 512
ReadX 13649 20875 512 512
ReadX 13649 21387 512 512
ReadX 13649 21899 512 512
ReadX 13649 22411 512 512
ReadX 13649 22923 512 512
ReadX 13649 23435 512 512
ReadX 13649 23947 512 512
ReadX 13649 24459 512 512
ReadX 13649 24971 282 282
ReadX 13649 3434 512 512
ReadX 13649 2818 512 512
ReadX 13649 2870 512 512
ReadX 13649 3026 512 512
ReadX 13649 3538 512 512
ReadX 13649 2870 512 512
ReadX 13649 3382 512 512
ReadX 13649 3894 512 512
ReadX 13649 4406 512 512
ReadX 13649 4918 512 512
ReadX 13649 5430 512 512
ReadX 13649 5942 512 512
ReadX 13649 6454 374 374
ReadX 13649 2856 138 138
ReadX 13649 2994 512 512
ReadX 13649 3506 512 512
ReadX 13649 4018 512 512
ReadX 13649 4530 512 512
ReadX 13649 5042 512 512
ReadX 13649 5554 512 512
ReadX 13649 6066 374 374
ReadX 13649 2886 138 138
ReadX 13649 3024 512 512
ReadX 13649 3536 512 512
ReadX 13649 4048 512 512
ReadX 13649 4560 512 512
ReadX 13649 5072 512 512
ReadX 13649 5584 512 512
ReadX 13649 6096 512 512
ReadX 13649 6608 512 512
ReadX 13649 7120 512 512
ReadX 13649 7632 512 512
ReadX 13649 8144 512 512
ReadX 13649 8656 512 512
ReadX 13649 9168 512 512
ReadX 13649 9680 512 512
ReadX 13649 10192 512 512
ReadX 13649 10704 512 512
ReadX 13649 11216 512 512
ReadX 13649 11728 512 512
ReadX 13649 12240 512 512
ReadX 13649 12752 512 512
QUERY_FS_INFORMATION 259
ReadX 13649 13264 512 512
ReadX 13649 13776 512 512
ReadX 13649 14288 512 512
ReadX 13649 14800 512 512
ReadX 13649 15312 512 512
ReadX 13649 15824 512 512
ReadX 13649 16336 512 512
ReadX 13649 16848 512 512
ReadX 13649 17360 512 512
ReadX 13649 17872 512 512
ReadX 13649 18384 512 512
ReadX 13649 18896 512 512
ReadX 13649 19408 512 512
ReadX 13649 19920 512 512
ReadX 13649 20432 512 512
ReadX 13649 20944 512 512
ReadX 13649 21456 512 512
ReadX 13649 21968 512 512
ReadX 13649 22480 512 512
ReadX 13649 22992 512 512
ReadX 13649 2998 512 512
ReadX 13649 3510 512 512
ReadX 13649 3001 512 512
ReadX 13649 3003 512 512
ReadX 13649 3515 512 512
ReadX 13649 4027 512 512
ReadX 13649 4539 512 512
ReadX 13649 5051 512 512
ReadX 13649 5563 512 512
ReadX 13649 6075 512 512
ReadX 13649 6587 512 512
ReadX 13649 7099 512 512
ReadX 13649 7611 512 512
ReadX 13649 8123 512 512
ReadX 13649 8635 512 512
ReadX 13649 3029 512 512
ReadX 13649 3541 512 512
ReadX 13649 4053 512 512
ReadX 13649 4565 512 512
ReadX 13649 5077 512 512
ReadX 13649 5589 512 512
ReadX 13649 6101 512 512
ReadX 13649 6613 512 512
ReadX 13649 7125 512 512
ReadX 13649 7637 512 512
ReadX 13649 8149 512 512
ReadX 13649 8661 512 512
ReadX 13649 9173 512 512
ReadX 13649 9685 512 512
ReadX 13649 10197 512 512
ReadX 13649 10709 512 512
ReadX 13649 11221 512 512
ReadX 13649 11733 512 512
ReadX 13649 12245 512 512
ReadX 13649 12757 512 512
ReadX 13649 13269 40 40
ReadX 13649 3076 472 472
ReadX 13649 3548 512 512
ReadX 13649 4060 512 512
ReadX 13649 4572 512 512
ReadX 13649 5084 512 512
ReadX 13649 5596 512 512
ReadX 13649 6108 512 512
ReadX 13649 6620 512 512
ReadX 13649 7132 512 512
ReadX 13649 7644 512 512
ReadX 13649 8156 512 512
ReadX 13649 8668 512 512
ReadX 13649 9180 512 512
ReadX 13649 9692 512 512
ReadX 13649 10204 512 512
ReadX 13649 10716 512 512
ReadX 13649 11228 512 512
ReadX 13649 11740 512 512
ReadX 13649 12252 512 512
ReadX 13649 12764 512 512
ReadX 13649 13276 310 310
ReadX 13649 3001 512 512
ReadX 13649 2562 512 512
ReadX 13649 2626 512 512
ReadX 13649 3003 512 512
ReadX 13649 2721 512 512
ReadX 13649 2626 512 512
ReadX 13649 3138 512 512
ReadX 13649 3650 512 512
ReadX 13649 4162 512 512
ReadX 13649 4674 512 512
ReadX 13649 5186 512 512
ReadX 13649 5698 512 512
ReadX 13649 6210 424 424
ReadX 13649 2612 88 88
ReadX 13649 2700 512 512
ReadX 13649 3212 512 512
ReadX 13649 3724 512 512
ReadX 13649 4236 512 512
ReadX 13649 4748 512 512
ReadX 13649 5260 512 512
ReadX 13649 5772 424 424
ReadX 13649 2642 88 88
ReadX 13649 2730 512 512
ReadX 13649 3242 512 512
ReadX 13649 3754 512 512
ReadX 13649 4266 512 512
ReadX 13649 4778 512 512
ReadX 13649 5290 512 512
ReadX 13649 5802 512 512
ReadX 13649 6314 512 512
ReadX 13649 6826 512 512
ReadX 13649 7338 512 512
ReadX 13649 7850 512 512
ReadX 13649 8362 512 512
ReadX 13649 8874 512 512
ReadX 13649 9386 512 512
ReadX 13649 9898 512 512
ReadX 13649 10410 512 512
ReadX 13649 10922 512 512
ReadX 13649 11434 512 512
ReadX 13649 11946 512 512
ReadX 13649 12458 512 512
ReadX 13649 2716 512 512
ReadX 13649 2717 512 512
ReadX 13649 2718 512 512
ReadX 13649 3230 512 512
ReadX 13649 2721 512 512
ReadX 13649 3233 512 512
ReadX 13649 3745 512 512
ReadX 13649 4257 512 512
ReadX 13649 4769 512 512
ReadX 13649 5281 512 512
ReadX 13649 5793 512 512
ReadX 13649 6305 512 512
ReadX 13649 6817 512 512
ReadX 13649 7329 512 512
ReadX 13649 7841 512 512
ReadX 13649 8353 512 512
ReadX 13649 8865 512 512
ReadX 13649 9377 512 512
ReadX 13649 9889 512 512
ReadX 13649 10401 512 512
ReadX 13649 10913 512 512
ReadX 13649 11425 512 512
ReadX 13649 11937 512 512
ReadX 13649 12449 512 512
ReadX 13649 12961 512 512
ReadX 13649 13473 512 512
ReadX 13649 13985 106 106
ReadX 13649 2820 406 406
ReadX 13649 3226 512 512
ReadX 13649 3738 512 512
ReadX 13649 4250 512 512
ReadX 13649 4762 512 512
ReadX 13649 5274 512 512
ReadX 13649 5786 512 512
ReadX 13649 6298 512 512
ReadX 13649 6810 512 512
ReadX 13649 7322 512 512
ReadX 13649 7834 512 512
ReadX 13649 8346 512 512
ReadX 13649 8858 512 512
ReadX 13649 9370 512 512
ReadX 13649 9882 512 512
ReadX 13649 10394 512 512
ReadX 13649 10906 512 512
ReadX 13649 11418 182 182
ReadX 13649 2717 512 512
ReadX 13649 258 512 512
ReadX 13649 470 512 512
ReadX 13649 376 512 512
ReadX 13649 888 512 512
ReadX 13649 1400 512 512
ReadX 13649 1912 512 512
ReadX 13649 2424 512 512
ReadX 13649 2936 512 512
ReadX 13649 3448 512 512
ReadX 13649 3960 424 424
ReadX 13649 362 88 88
ReadX 13649 450 512 512
ReadX 13649 962 512 512
ReadX 13649 1474 512 512
ReadX 13649 1986 512 512
ReadX 13649 2498 512 512
ReadX 13649 3010 512 512
ReadX 13649 3522 424 424
ReadX 13649 392 88 88
ReadX 13649 480 512 512
ReadX 13649 992 512 512
ReadX 13649 1504 512 512
ReadX 13649 2016 512 512
ReadX 13649 2528 512 512
ReadX 13649 3040 512 512
ReadX 13649 3552 512 512
ReadX 13649 4064 512 512
ReadX 13649 4576 512 512
ReadX 13649 5088 512 512
ReadX 13649 5600 512 512
ReadX 13649 6112 512 512
ReadX 13649 6624 512 512
ReadX 13649 7136 512 512
ReadX 13649 7648 512 512
ReadX 13649 8160 512 512
ReadX 13649 8672 512 512
ReadX 13649 9184 512 512
ReadX 13649 9696 512 512
ReadX 13649 10208 512 512
ReadX 13649 464 512 512
ReadX 13649 465 512 512
ReadX 13649 466 512 512
ReadX 13649 978 512 512
ReadX 13649 470 512 512
ReadX 13649 982 512 512
ReadX 13649 1494 512 512
ReadX 13649 2006 512 512
ReadX 13649 2518 512 512
ReadX 13649 3030 512 512
ReadX 13649 3542 512 512
ReadX 13649 4054 512 512
ReadX 13649 4566 512 512
ReadX 13649 5078 512 512
ReadX 13649 5590 512 512
ReadX 13649 6102 512 512
ReadX 13649 6614 512 512
ReadX 13649 7126 512 512
ReadX 13649 7638 512 512
ReadX 13649 8150 512 512
ReadX 13649 8662 512 512
ReadX 13649 9174 512 512
ReadX 13649 9686 512 512
ReadX 13649 10198 512 512
ReadX 13649 10710 333 333
ReadX 13649 11043 512 512
ReadX 13649 11555 179 179
ReadX 13649 11734 512 512
ReadX 13649 12246 512 512
ReadX 13649 12758 512 512
ReadX 13649 13270 512 512
ReadX 13649 13782 512 512
ReadX 13649 14294 512 512
ReadX 13649 14806 512 512
ReadX 13649 15318 512 512
ReadX 13649 15830 512 512
ReadX 13649 16342 512 512
ReadX 13649 16854 512 512
ReadX 13649 17366 512 512
ReadX 13649 17878 512 512
ReadX 13649 18390 512 512
ReadX 13649 18902 512 512
ReadX 13649 19414 512 512
ReadX 13649 19926 512 512
ReadX 13649 20438 512 512
ReadX 13649 20950 512 512
ReadX 13649 21462 512 512
ReadX 13649 21974 350 350
ReadX 13649 465 512 512
ReadX 13649 3812 512 512
ReadX 13649 4046 512 512
ReadX 13649 3828 512 512
ReadX 13649 256 512 512
ReadX 13649 260 512 512
ReadX 13649 4066 512 512
ReadX 13649 4578 512 512
ReadX 13649 5090 512 512
ReadX 13649 5602 512 512
ReadX 13649 6114 512 512
ReadX 13649 6626 512 512
ReadX 13649 7138 512 512
ReadX 13649 7650 394 394
ReadX 13649 4052 118 118
ReadX 13649 4170 512 512
ReadX 13649 4682 512 512
ReadX 13649 5194 512 512
ReadX 13649 5706 512 512
ReadX 13649 6218 512 512
ReadX 13649 6730 512 512
ReadX 13649 7242 394 394
ReadX 13649 4082 118 118
ReadX 13649 4200 512 512
ReadX 13649 4712 512 512
ReadX 13649 5224 512 512
ReadX 13649 5736 512 512
ReadX 13649 6248 512 512
ReadX 13649 6760 512 512
ReadX 13649 7272 512 512
ReadX 13649 7784 394 394
ReadX 13649 256 118 118
ReadX 13649 374 512 512
ReadX 13649 886 512 512
ReadX 13649 1398 512 512
ReadX 13649 1910 512 512
ReadX 13649 2422 512 512
ReadX 13649 2934 512 512
ReadX 13649 3446 512 512
ReadX 13649 3958 512 512
ReadX 13649 4470 512 512
ReadX 13649 4982 512 512
ReadX 13649 5494 512 512
ReadX 13649 6006 512 512
ReadX 13649 6518 512 512
ReadX 13649 7030 512 512
ReadX 13649 7542 512 512
ReadX 13649 8054 512 512
ReadX 13649 8566 512 512
ReadX 13649 9078 512 512
ReadX 13649 9590 512 512
ReadX 13649 10102 512 512
ReadX 13649 259 512 512
ReadX 13649 771 512 512
ReadX 13649 259 512 512
ReadX 13649 259 512 512
ReadX 13649 771 512 512
ReadX 13649 1283 512 512
ReadX 13649 1795 512 512
ReadX 13649 2307 512 512
ReadX 13649 2819 512 512
ReadX 13649 3331 512 512
ReadX 13649 3843 512 512
ReadX 13649 4355 512 512
ReadX 13649 4867 512 512
ReadX 13649 260 512 512
ReadX 13649 772 512 512
ReadX 13649 1284 512 512
ReadX 13649 1796 512 512
ReadX 13649 2308 512 512
ReadX 13649 2820 512 512
ReadX 13649 3332 512 512
ReadX 13649 3844 512 512
ReadX 13649 4356 512 512
ReadX 13649 4868 512 512
ReadX 13649 5380 512 512
ReadX 13649 5892 512 512
ReadX 13649 6404 512 512
ReadX 13649 6916 512 512
ReadX 13649 7428 512 512
ReadX 13649 7940 512 512
ReadX 13649 8452 512 512
ReadX 13649 8964 512 512
ReadX 13649 9476 512 512
ReadX 13649 9988 512 512
ReadX 13649 10500 378 378
ReadX 13649 10878 512 512
ReadX 13649 11390 134 134
ReadX 13649 11524 512 512
ReadX 13649 12036 512 512
ReadX 13649 12548 512 512
ReadX 13649 13060 512 512
ReadX 13649 13572 138 138
ReadX 13649 259 512 512
ReadX 13649 273 512 512
ReadX 13649 276 512 512
ReadX 13649 295 512 512
ReadX 13649 288 512 512
ReadX 13649 296 512 512
ReadX 13649 259 512 512
ReadX 13649 273 512 512
ReadX 13649 273 512 512
ReadX 13649 785 512 512
ReadX 13649 1297 512 512
ReadX 13649 1809 512 512
ReadX 13649 2321 512 512
ReadX 13649 274 512 512
ReadX 13649 274 512 512
ReadX 13649 274 497 497
ReadX 13649 272 15 15
ReadX 13649 287 512 512
ReadX 13649 799 512 512
ReadX 13649 273 512 512
ReadX 13649 785 512 512
ReadX 13649 1297 512 512
ReadX 13649 1809 512 512
ReadX 13649 2321 512 512
ReadX 13649 2833 317 317
ReadX 13649 274 195 195
ReadX 13649 469 512 512
ReadX 13649 981 512 512
ReadX 13649 1493 512 512
ReadX 13649 2005 512 512
ReadX 13649 2517 512 512
ReadX 13649 3029 512 512
ReadX 13649 3541 512 512
ReadX 13649 4053 512 512
ReadX 13649 4565 250 250
ReadX 13649 274 512 512
ReadX 13649 283 512 512
ReadX 13649 795 512 512
ReadX 13649 276 512 512
ReadX 13649 788 512 512
ReadX 13649 1300 512 512
ReadX 13649 1812 512 512
ReadX 13649 2324 512 512
ReadX 13649 2836 512 512
ReadX 13649 3348 512 512
ReadX 13649 3860 420 420
ReadX 13649 275 92 92
ReadX 13649 367 512 512
ReadX 13649 879 512 512
ReadX 13649 1391 512 512
ReadX 13649 1903 512 512
ReadX 13649 2415 512 512
ReadX 13649 2927 512 512
ReadX 13649 3439 420 420
ReadX 13649 277 92 92
ReadX 13649 369 512 512
ReadX 13649 881 512 512
ReadX 13649 1393 512 512
ReadX 13649 1905 512 512
ReadX 13649 2417 512 512
ReadX 13649 2929 512 512
ReadX 13649 3441 512 512
ReadX 13649 3953 512 512
ReadX 13649 4465 512 512
ReadX 13649 4977 512 512
ReadX 13649 5489 512 512
ReadX 13649 6001 512 512
ReadX 13649 6513 512 512
ReadX 13649 7025 512 512
ReadX 13649 7537 512 512
ReadX 13649 8049 512 512
ReadX 13649 8561 512 512
ReadX 13649 9073 512 512
ReadX 13649 9585 512 512
ReadX 13649 10097 512 512
ReadX 13649 282 512 512
ReadX 13649 794 512 512
ReadX 13649 1306 512 512
ReadX 13649 1818 512 512
ReadX 13649 2330 512 512
ReadX 13649 2842 512 512
ReadX 13649 3354 512 512
ReadX 13649 3866 512 512
ReadX 13649 4378 512 512
ReadX 13649 284 512 512
ReadX 13649 796 512 512
ReadX 13649 1308 512 512
ReadX 13649 1820 512 512
ReadX 13649 2332 512 512
ReadX 13649 2844 512 512
ReadX 13649 3356 512 512
ReadX 13649 3868 512 512
ReadX 13649 4380 512 512
ReadX 13649 4892 512 512
ReadX 13649 5404 512 512
ReadX 13649 5916 512 512
ReadX 13649 6428 512 512
ReadX 13649 6940 512 512
ReadX 13649 7452 512 512
ReadX 13649 7964 512 512
ReadX 13649 8476 512 512
ReadX 13649 8988 512 512
ReadX 13649 9500 512 512
ReadX 13649 10012 512 512
ReadX 13649 10524 472 472
ReadX 13649 288 40 40
ReadX 13649 328 512 512
ReadX 13649 840 512 512
ReadX 13649 1352 512 512
ReadX 13649 1864 512 512
ReadX 13649 2376 512 512
ReadX 13649 2888 512 512
ReadX 13649 3400 512 512
ReadX 13649 3912 512 512
ReadX 13649 4424 512 512
ReadX 13649 4936 512 512
ReadX 13649 5448 512 512
ReadX 13649 5960 512 512
ReadX 13649 6472 512 512
ReadX 13649 6984 512 512
ReadX 13649 7496 512 512
ReadX 13649 8008 512 512
ReadX 13649 8520 512 512
ReadX 13649 9032 512 512
ReadX 13649 9544 512 512
ReadX 13649 10056 512 512
ReadX 13649 10568 506 506
ReadX 13649 282 512 512
ReadX 13649 794 512 512
ReadX 13649 301 512 512
ReadX 13649 296 512 512
ReadX 13649 808 512 512
ReadX 13649 1320 512 512
ReadX 13649 1832 512 512
ReadX 13649 2344 512 512
ReadX 13649 2856 512 512
ReadX 13649 3368 512 512
ReadX 13649 3880 424 424
ReadX 13649 295 88 88
ReadX 13649 383 512 512
ReadX 13649 895 512 512
ReadX 13649 1407 512 512
ReadX 13649 1919 512 512
ReadX 13649 2431 512 512
ReadX 13649 2943 512 512
ReadX 13649 3455 424 424
ReadX 13649 297 88 88
ReadX 13649 385 512 512
ReadX 13649 897 512 512
ReadX 13649 1409 512 512
ReadX 13649 1921 512 512
ReadX 13649 2433 512 512
ReadX 13649 2945 512 512
ReadX 13649 3457 512 512
ReadX 13649 3969 512 512
ReadX 13649 4481 512 512
ReadX 13649 4993 512 512
ReadX 13649 5505 512 512
ReadX 13649 6017 512 512
ReadX 13649 6529 512 512
ReadX 13649 7041 512 512
ReadX 13649 7553 512 512
ReadX 13649 8065 512 512
ReadX 13649 8577 512 512
ReadX 13649 9089 512 512
ReadX 13649 9601 512 512
ReadX 13649 10113 512 512
ReadX 13649 301 512 512
ReadX 13649 301 512 512
ReadX 13649 301 512 512
ReadX 13649 813 512 512
ReadX 13649 301 512 512
ReadX 13649 813 512 512
ReadX 13649 1325 512 512
ReadX 13649 1837 512 512
ReadX 13649 2349 512 512
ReadX 13649 2861 512 512
ReadX 13649 3373 512 512
ReadX 13649 3885 512 512
ReadX 13649 4397 512 512
ReadX 13649 4909 512 512
ReadX 13649 5421 512 512
ReadX 13649 5933 512 512
ReadX 13649 6445 512 512
ReadX 13649 6957 512 512
ReadX 13649 7469 512 512
ReadX 13649 7981 512 512
ReadX 13649 8493 512 512
ReadX 13649 9005 512 512
ReadX 13649 9517 463 463
ReadX 13649 9980 512 512
ReadX 13649 10492 49 49
ReadX 13649 10541 512 512
ReadX 13649 11053 512 512
ReadX 13649 11565 512 512
ReadX 13649 12077 512 512
ReadX 13649 12589 512 512
ReadX 13649 13101 512 512
ReadX 13649 13613 512 512
ReadX 13649 14125 512 512
ReadX 13649 14637 512 512
ReadX 13649 15149 512 512
ReadX 13649 15661 512 512
ReadX 13649 16173 512 512
ReadX 13649 16685 512 512
ReadX 13649 17197 512 512
ReadX 13649 17709 512 512
ReadX 13649 18221 512 512
ReadX 13649 18733 512 512
ReadX 13649 19245 512 512
ReadX 13649 19757 512 512
ReadX 13649 20269 512 512
ReadX 13649 20781 326 326
ReadX 13649 301 512 512
QUERY_FS_INFORMATION 259
Close 13647
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13650
Close 13650
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13651
ReadX 13651 0 24 24
Close 13651
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13652
QUERY_FILE_INFORMATION 13652
ReadX 13652 0 512 512
ReadX 13652 476 512 512
ReadX 13652 510 512 512
ReadX 13652 484 512 512
ReadX 13652 474 512 512
ReadX 13652 478 512 512
ReadX 13652 990 512 512
ReadX 13652 509 57 57
Close 13652
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13653
QUERY_FILE_INFORMATION 13653
ReadX 13653 0 512 512
ReadX 13653 476 512 512
ReadX 13653 510 512 512
ReadX 13653 484 512 512
ReadX 13653 480 512 512
ReadX 13653 474 512 512
ReadX 13653 478 512 512
QUERY_FILE_INFORMATION 13653
WriteX 13653 494 60 60
WriteX 13653 494 4 4
QUERY_FILE_INFORMATION 13653
WriteX 13653 494 11 11
WriteX 13653 510 512 512
WriteX 13653 484 512 512
WriteX 13653 474 512 512
WriteX 13653 478 512 512
WriteX 13653 990 512 512
Close 13653
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP 0x40 0x2 13654
Close 13654
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x200000 0x1 13655
Close 13655
Rename \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 13657
WriteX 13657 4607 1 1
QUERY_FILE_INFORMATION 13657
WriteX 13657 0 65471 65471
WriteX 13657 65471 65 65
WriteX 13657 65536 19490 19490
Close 13657
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13658
QUERY_FILE_INFORMATION 13658
ReadX 13658 0 512 512
ReadX 13658 482 512 512
ReadX 13658 994 512 512
ReadX 13658 1506 512 512
ReadX 13658 480 512 512
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
WriteX 13658 490 448 448
QUERY_FILE_INFORMATION 13658
WriteX 13658 490 60 60
WriteX 13658 490 4 4
QUERY_FILE_INFORMATION 13658
WriteX 13658 490 11 11
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
WriteX 13658 484 512 512
WriteX 13658 996 512 512
WriteX 13658 1508 512 512
WriteX 13658 482 512 512
WriteX 13658 0 512 512
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
ReadX 13658 490 512 512
WriteX 13658 502 512 512
WriteX 13658 502 292 292
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
WriteX 13658 503 20 20
WriteX 13658 503 108 108
QUERY_FILE_INFORMATION 13658
WriteX 13658 504 448 448
QUERY_FILE_INFORMATION 13658
WriteX 13658 504 44 44
WriteX 13658 504 20 20
WriteX 13658 500 512 512
WriteX 13658 492 512 512
WriteX 13658 496 512 512
WriteX 13658 1008 512 512
WriteX 13658 494 512 512
Flush 13658
WriteX 13658 0 512 512
Flush 13658
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
WriteX 13658 500 512 512
WriteX 13658 492 512 512
WriteX 13658 496 512 512
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
WriteX 13658 518 320 320
QUERY_FILE_INFORMATION 13658
WriteX 13658 518 60 60
ReadX 13658 504 512 512
WriteX 13658 522 512 512
WriteX 13658 506 3204 3204
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
WriteX 13658 519 25 25
WriteX 13658 518 103 103
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
WriteX 13658 519 44 44
WriteX 13658 519 20 20
WriteX 13658 520 512 512
WriteX 13658 482 512 512
WriteX 13658 486 512 512
WriteX 13658 998 512 512
WriteX 13658 484 512 512
WriteX 13658 490 512 512
Flush 13658
WriteX 13658 0 512 512
Flush 13658
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
QUERY_FILE_INFORMATION 13658
WriteX 13658 519 7 7
WriteX 13658 519 57 57
WriteX 13658 520 512 512
WriteX 13658 492 512 512
WriteX 13658 482 512 512
WriteX 13658 486 512 512
WriteX 13658 998 512 512
Flush 13658
WriteX 13658 520 512 512
Flush 13658
Close 13658
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13659
Close 13659
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13660
QUERY_FILE_INFORMATION 13660
ReadX 13660 0 512 512
ReadX 13660 490 512 512
ReadX 13660 484 512 512
ReadX 13660 520 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP 0x40 0x1 13661
Close 13661
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 13660
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TIPS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TIPS.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 13662
Close 13662
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 13663
ReadX 13663 0 24 24
Close 13663
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 13664
QUERY_FILE_INFORMATION 13664
ReadX 13664 0 512 512
ReadX 13664 366 512 512
ReadX 13664 878 512 512
ReadX 13664 1390 512 512
ReadX 13664 1902 512 512
ReadX 13664 374 57 57
Close 13664
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 13665
QUERY_FILE_INFORMATION 13665
ReadX 13665 0 512 512
ReadX 13665 366 512 512
ReadX 13665 878 512 512
ReadX 13665 1390 512 512
ReadX 13665 1902 512 512
QUERY_FILE_INFORMATION 13665
WriteX 13665 374 60 60
WriteX 13665 374 4 4
QUERY_FILE_INFORMATION 13665
WriteX 13665 374 11 11
ReadX 13665 374 57 57
ReadX 13665 374 57 57
ReadX 13665 292 4096 4096
ReadX 13665 364 512 512
ReadX 13665 512 4096 4096
ReadX 13665 4608 4096 4096
ReadX 13665 8704 4096 4096
ReadX 13665 12800 4096 4096
ReadX 13665 16896 4096 4096
ReadX 13665 20992 4096 4096
ReadX 13665 25088 4096 4096
ReadX 13665 29184 4096 4096
ReadX 13665 33280 4096 4096
ReadX 13665 37376 4096 4096
ReadX 13665 41472 4096 4096
ReadX 13665 45568 4096 4096
ReadX 13665 49664 4096 4096
ReadX 13665 53760 4096 4096
ReadX 13665 57856 4096 4096
ReadX 13665 61952 4096 4096
ReadX 13665 66048 4096 4096
ReadX 13665 70144 4096 4096
ReadX 13665 74240 162 162
ReadX 13665 308 4096 4096
ReadX 13665 4404 4096 4096
WriteX 13665 368 512 512
WriteX 13665 880 512 512
WriteX 13665 1392 512 512
Close 13665
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 13666
Close 13666
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 13667
QUERY_FILE_INFORMATION 13667
ReadX 13667 0 512 512
ReadX 13667 366 512 512
ReadX 13667 878 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 13668
Close 13668
Unlink \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 13667
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 13670
WriteX 13670 4607 1 1
QUERY_FILE_INFORMATION 13670
WriteX 13670 0 65471 65471
WriteX 13670 65471 65 65
WriteX 13670 65536 8866 8866
Close 13670
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13671
QUERY_FILE_INFORMATION 13671
ReadX 13671 0 512 512
ReadX 13671 366 512 512
ReadX 13671 878 512 512
ReadX 13671 1390 512 512
ReadX 13671 364 512 512
QUERY_FILE_INFORMATION 13671
QUERY_FILE_INFORMATION 13671
QUERY_FILE_INFORMATION 13671
WriteX 13671 374 448 448
QUERY_FILE_INFORMATION 13671
WriteX 13671 374 60 60
WriteX 13671 374 4 4
QUERY_FILE_INFORMATION 13671
WriteX 13671 374 11 11
QUERY_FILE_INFORMATION 13671
QUERY_FILE_INFORMATION 13671
WriteX 13671 374 7 7
WriteX 13671 374 57 57
WriteX 13671 368 512 512
WriteX 13671 880 512 512
WriteX 13671 1392 512 512
WriteX 13671 366 512 512
WriteX 13671 0 512 512
Flush 13671
WriteX 13671 368 512 512
Flush 13671
Close 13671
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13672
QUERY_FILE_INFORMATION 13672
ReadX 13672 0 512 512
ReadX 13672 366 512 512
ReadX 13672 878 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 13672
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13673
Close 13673
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13674
ReadX 13674 0 24 24
Close 13674
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13675
QUERY_FILE_INFORMATION 13675
ReadX 13675 0 512 512
ReadX 13675 366 512 512
ReadX 13675 878 512 512
ReadX 13675 1390 512 512
ReadX 13675 1902 512 512
ReadX 13675 374 57 57
Close 13675
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13676
QUERY_FILE_INFORMATION 13676
ReadX 13676 0 512 512
ReadX 13676 366 512 512
ReadX 13676 878 512 512
ReadX 13676 1390 512 512
ReadX 13676 1902 512 512
QUERY_FILE_INFORMATION 13676
WriteX 13676 374 60 60
WriteX 13676 374 4 4
QUERY_FILE_INFORMATION 13676
WriteX 13676 374 11 11
WriteX 13676 368 512 512
WriteX 13676 880 512 512
WriteX 13676 1392 512 512
Close 13676
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP 0x40 0x2 13677
Close 13677
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x200000 0x1 13678
Close 13678
Rename \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 13680
WriteX 13680 4607 1 1
QUERY_FILE_INFORMATION 13680
WriteX 13680 0 65471 65471
WriteX 13680 65471 65 65
WriteX 13680 0 8192 8192
WriteX 13680 65536 9298 9298
Close 13680
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13681
QUERY_FILE_INFORMATION 13681
ReadX 13681 0 512 512
ReadX 13681 368 512 512
ReadX 13681 880 512 512
ReadX 13681 1392 512 512
ReadX 13681 366 512 512
QUERY_FILE_INFORMATION 13681
QUERY_FILE_INFORMATION 13681
QUERY_FILE_INFORMATION 13681
WriteX 13681 376 448 448
QUERY_FILE_INFORMATION 13681
WriteX 13681 376 60 60
WriteX 13681 376 4 4
QUERY_FILE_INFORMATION 13681
WriteX 13681 376 11 11
QUERY_FILE_INFORMATION 13681
QUERY_FILE_INFORMATION 13681
WriteX 13681 376 7 7
WriteX 13681 376 57 57
WriteX 13681 370 512 512
WriteX 13681 882 512 512
WriteX 13681 1394 512 512
WriteX 13681 368 512 512
WriteX 13681 0 512 512
Flush 13681
WriteX 13681 370 512 512
Flush 13681
Close 13681
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13682
Close 13682
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13683
QUERY_FILE_INFORMATION 13683
ReadX 13683 0 512 512
ReadX 13683 368 512 512
ReadX 13683 880 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP 0x40 0x1 13684
Close 13684
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\Designs 1
NTCreateX \clients\client1\~dmtmp\Designs 0x40 0x1 -1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TRIDOTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT 1
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 13686
Close 13686
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 13687
ReadX 13687 0 24 24
Close 13687
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 13688
QUERY_FILE_INFORMATION 13688
ReadX 13688 0 512 512
ReadX 13688 512 512 512
ReadX 13688 1024 512 512
ReadX 13688 2016 512 512
ReadX 13688 1056 512 512
ReadX 13688 1096 57 57
Close 13688
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 13689
QUERY_FILE_INFORMATION 13689
ReadX 13689 0 512 512
ReadX 13689 512 512 512
ReadX 13689 1024 512 512
ReadX 13689 2016 512 512
ReadX 13689 1056 512 512
ReadX 13689 1096 57 57
ReadX 13689 1096 57 57
ReadX 13689 1088 62 62
ReadX 13689 1536 4096 4096
ReadX 13689 5632 4096 4096
ReadX 13689 9728 4096 4096
ReadX 13689 13824 2859 2859
ReadX 13689 1120 28 28
ReadX 13689 1148 20 20
ReadX 13689 1168 8 8
ReadX 13689 1176 88 88
ReadX 13689 1264 8 8
ReadX 13689 1272 4 4
ReadX 13689 1276 4 4
ReadX 13689 1280 1 1
ReadX 13689 1130 4 4
ReadX 13689 1134 4 4
ReadX 13689 1138 1 1
ReadX 13689 1131 4 4
ReadX 13689 1135 4 4
ReadX 13689 1139 1 1
ReadX 13689 1131 4 4
ReadX 13689 1135 4 4
ReadX 13689 1139 2 2
ReadX 13689 1132 4 4
ReadX 13689 1136 4 4
ReadX 13689 1140 25 25
ReadX 13689 1134 4 4
ReadX 13689 1138 8 8
ReadX 13689 1146 4 4
ReadX 13689 1150 8 8
ReadX 13689 1158 4 4
ReadX 13689 1162 8 8
ReadX 13689 1170 4 4
ReadX 13689 1174 4 4
ReadX 13689 1178 4 4
ReadX 13689 1182 4 4
ReadX 13689 1186 4 4
ReadX 13689 1190 4 4
ReadX 13689 1194 13900 13900
ReadX 13689 2048 4096 4096
Close 13689
QUERY_FS_INFORMATION 259
Close 13683
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13690
Close 13690
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13691
ReadX 13691 0 24 24
Close 13691
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13692
QUERY_FILE_INFORMATION 13692
ReadX 13692 0 512 512
ReadX 13692 368 512 512
ReadX 13692 880 512 512
ReadX 13692 1392 512 512
ReadX 13692 1904 512 512
ReadX 13692 376 57 57
Close 13692
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13693
QUERY_FILE_INFORMATION 13693
ReadX 13693 0 512 512
ReadX 13693 368 512 512
ReadX 13693 880 512 512
ReadX 13693 1392 512 512
ReadX 13693 1904 512 512
QUERY_FILE_INFORMATION 13693
WriteX 13693 376 60 60
WriteX 13693 376 4 4
QUERY_FILE_INFORMATION 13693
WriteX 13693 376 11 11
WriteX 13693 370 512 512
WriteX 13693 882 512 512
WriteX 13693 1394 512 512
Close 13693
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP 0x40 0x2 13694
Close 13694
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x200000 0x1 13695
Close 13695
Rename \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 13697
WriteX 13697 4607 1 1
QUERY_FILE_INFORMATION 13697
WriteX 13697 0 65471 65471
WriteX 13697 65471 65 65
WriteX 13697 65536 11540 11540
Close 13697
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13698
QUERY_FILE_INFORMATION 13698
ReadX 13698 0 512 512
ReadX 13698 398 512 512
ReadX 13698 910 512 512
ReadX 13698 1422 512 512
ReadX 13698 396 512 512
QUERY_FILE_INFORMATION 13698
QUERY_FILE_INFORMATION 13698
QUERY_FILE_INFORMATION 13698
WriteX 13698 406 448 448
QUERY_FILE_INFORMATION 13698
WriteX 13698 406 60 60
WriteX 13698 406 4 4
QUERY_FILE_INFORMATION 13698
WriteX 13698 406 11 11
QUERY_FILE_INFORMATION 13698
QUERY_FILE_INFORMATION 13698
WriteX 13698 406 7 7
WriteX 13698 406 57 57
WriteX 13698 400 512 512
WriteX 13698 912 512 512
WriteX 13698 1424 512 512
WriteX 13698 398 512 512
WriteX 13698 0 512 512
Flush 13698
WriteX 13698 400 512 512
Flush 13698
Close 13698
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13699
Close 13699
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13700
QUERY_FILE_INFORMATION 13700
ReadX 13700 0 512 512
ReadX 13700 398 512 512
ReadX 13700 910 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP 0x40 0x1 13701
Close 13701
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 13700
ReadX 13649 1434 512 512
Close 13649
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13702
WriteX 13702 0 65471 65471
WriteX 13702 65471 63 63
WriteX 13702 65534 65471 65471
WriteX 13702 131005 63 63
Close 13702
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13703
WriteX 13703 0 65471 65471
WriteX 13703 65471 63 63
WriteX 13703 65534 65471 65471
WriteX 13703 131005 63 63
WriteX 13703 131068 65471 65471
WriteX 13703 196539 63 63
WriteX 13703 196602 65471 65471
WriteX 13703 262073 63 63
Close 13703
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13704
WriteX 13704 0 65471 65471
WriteX 13704 65471 63 63
WriteX 13704 65534 65471 65471
WriteX 13704 131005 63 63
WriteX 13704 131068 65471 65471
WriteX 13704 196539 63 63
WriteX 13704 196602 65471 65471
WriteX 13704 262073 63 63
WriteX 13704 262136 65471 65471
WriteX 13704 327607 63 63
WriteX 13704 327670 65471 65471
WriteX 13704 393141 63 63
WriteX 13704 393204 65471 65471
WriteX 13704 458675 63 63
WriteX 13704 458738 65471 65471
WriteX 13704 524209 63 63
Close 13704
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 13705
Close 13705
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CDRROLS.CFG
NTCreateX \clients\client1\~dmtmp\COREL\CDRROLS.CFG 0x40 0x1 13706
ReadX 13706 0 512 512
ReadX 13706 512 511 511
ReadX 13706 1023 512 512
ReadX 13706 1535 512 512
Close 13706
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CDRBARS.CFG
NTCreateX \clients\client1\~dmtmp\COREL\CDRBARS.CFG 0x40 0x1 13707
ReadX 13707 0 512 512
ReadX 13707 512 510 510
ReadX 13707 1022 512 512
ReadX 13707 1534 510 510
ReadX 13707 2044 510 510
Close 13707
NTCreateX \clients\client1\~dmtmp\COREL\ARTISTIC.ACL 0x40 0x1 13708
ReadX 13708 0 512 512
ReadX 13708 512 512 512
ReadX 13708 1024 512 512
ReadX 13708 1536 512 512
ReadX 13708 2048 512 512
ReadX 13708 2560 512 512
ReadX 13708 3072 512 512
ReadX 13708 3584 512 512
ReadX 13708 4096 512 512
ReadX 13708 4608 512 512
ReadX 13708 5120 512 512
ReadX 13708 5632 512 512
ReadX 13708 6144 512 512
ReadX 13708 6656 512 512
ReadX 13708 7168 512 512
ReadX 13708 7680 512 512
ReadX 13708 8192 512 512
ReadX 13708 8704 512 512
Close 13708
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CDRMENU.CFG 1
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 13709
Close 13709
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CORELDRW.CDT
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13710
QUERY_FILE_INFORMATION 13710
Close 13710
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13711
ReadX 13711 0 8192 8192
Close 13711
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 13712
Close 13712
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 13713
QUERY_FILE_INFORMATION 13713
Close 13713
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 13714
ReadX 13714 0 8192 8192
Close 13714
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 13715
Close 13715
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13716
QUERY_FILE_INFORMATION 13716
Close 13716
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13717
ReadX 13717 0 8192 8192
Close 13717
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 13718
ReadX 13718 0 8192 8192
ReadX 13718 8192 8192 8192
ReadX 13718 16384 8192 8192
ReadX 13718 24576 8192 8192
Close 13718
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x2 13720
Close 13720
Unlink \clients\client1\~dmtmp\COREL\GRAPH1.CDR
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x2 13722
WriteX 13722 8191 1 1
QUERY_FILE_INFORMATION 13722
WriteX 13722 0 10438 10438
Close 13722
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\MAILBOX2.CPT
NTCreateX \clients\client1\~dmtmp\COREL\MAILBOX2.CPT 0x40 0x1 13723
Close 13723
NTCreateX \clients\client1\~dmtmp\COREL\MAILBOX2.CPT 0x40 0x1 13724
QUERY_FILE_INFORMATION 13724
QUERY_FILE_INFORMATION 13724
Close 13724
NTCreateX \clients\client1\~dmtmp\COREL\MAILBOX2.CPT 0x40 0x1 13725
QUERY_FILE_INFORMATION 13725
QUERY_FILE_INFORMATION 13725
Close 13725
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\TEAPOT2.CPT
NTCreateX \clients\client1\~dmtmp\COREL\TEAPOT2.CPT 0x40 0x1 13726
Close 13726
NTCreateX \clients\client1\~dmtmp\COREL\TEAPOT2.CPT 0x40 0x1 13727
QUERY_FILE_INFORMATION 13727
QUERY_FILE_INFORMATION 13727
Close 13727
NTCreateX \clients\client1\~dmtmp\COREL\TEAPOT2.CPT 0x40 0x1 13728
QUERY_FILE_INFORMATION 13728
QUERY_FILE_INFORMATION 13728
Close 13728
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\SIGN2.CPT
NTCreateX \clients\client1\~dmtmp\COREL\SIGN2.CPT 0x40 0x1 13729
Close 13729
NTCreateX \clients\client1\~dmtmp\COREL\SIGN2.CPT 0x40 0x1 13730
QUERY_FILE_INFORMATION 13730
QUERY_FILE_INFORMATION 13730
Close 13730
NTCreateX \clients\client1\~dmtmp\COREL\SIGN2.CPT 0x40 0x1 13731
QUERY_FILE_INFORMATION 13731
QUERY_FILE_INFORMATION 13731
Close 13731
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\TRAIN.CDR
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 13732
Close 13732
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 13733
QUERY_FILE_INFORMATION 13733
QUERY_FILE_INFORMATION 13733
Close 13733
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 13734
ReadX 13734 0 8 8
ReadX 13734 8 4 4
ReadX 13734 12 8 8
ReadX 13734 22 8 8
ReadX 13734 520 8 8
ReadX 13734 525 8 8
ReadX 13734 533 4 4
ReadX 13734 543 8 8
ReadX 13734 551 4 4
ReadX 13734 1058 8 8
ReadX 13734 1066 4 4
ReadX 13734 1081 8 8
ReadX 13734 1089 4 4
ReadX 13734 660 8 8
Close 13734
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 13735
ReadX 13735 0 8192 8192
Close 13735
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 13736
ReadX 13736 0 8192 8192
ReadX 13736 520 8192 8192
ReadX 13736 8712 8192 8192
ReadX 13736 16904 8192 8192
ReadX 13736 25096 8192 8192
ReadX 13736 33288 8192 8192
ReadX 13736 41480 8192 8192
ReadX 13736 49672 8192 8192
ReadX 13736 57864 8192 8192
ReadX 13736 66056 8192 8192
ReadX 13736 74248 8192 8192
ReadX 13736 82440 8192 8192
ReadX 13736 90632 8192 8192
ReadX 13736 98824 8192 8192
ReadX 13736 107016 8192 8192
ReadX 13736 115208 8192 8192
ReadX 13736 123400 8192 8192
ReadX 13736 131592 8192 8192
ReadX 13736 139784 8192 8192
ReadX 13736 147976 8192 8192
ReadX 13736 156168 8192 8192
Close 13736
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 13737
QUERY_FILE_INFORMATION 13737
Close 13737
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x200000 0x1 13738
Close 13738
Rename \clients\client1\~dmtmp\COREL\GRAPH1.CDR \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x2 13740
WriteX 13740 8191 1 1
QUERY_FILE_INFORMATION 13740
WriteX 13740 0 28489 28489
WriteX 13740 0 12288 12288
Close 13740
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.BAK 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x200000 0x1 13741
Close 13741
Rename \clients\client1\~dmtmp\COREL\@@@CDRW.TMP \clients\client1\~dmtmp\COREL\GRAPH1.BAK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 13742
Close 13742
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 13743
QUERY_FILE_INFORMATION 13743
Close 13743
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 13744
ReadX 13744 0 8192 8192
Close 13744
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 13745
Close 13745
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13746
QUERY_FILE_INFORMATION 13746
Close 13746
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13747
ReadX 13747 0 8192 8192
Close 13747
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 13748
ReadX 13748 0 8192 8192
ReadX 13748 8192 8192 8192
ReadX 13748 16384 8192 8192
ReadX 13748 24576 8192 8192
ReadX 13748 32768 16384 16384
ReadX 13748 49152 8192 8192
ReadX 13748 57344 8192 8192
ReadX 13748 65536 8192 8192
Close 13748
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x2 13750
Close 13750
Unlink \clients\client1\~dmtmp\COREL\GRAPH2.CDR
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x2 13752
WriteX 13752 8191 1 1
QUERY_FILE_INFORMATION 13752
WriteX 13752 0 29253 29253
Close 13752
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\ROSE.CPT
NTCreateX \clients\client1\~dmtmp\COREL\ROSE.CPT 0x40 0x1 13753
Close 13753
NTCreateX \clients\client1\~dmtmp\COREL\ROSE.CPT 0x40 0x1 13754
QUERY_FILE_INFORMATION 13754
QUERY_FILE_INFORMATION 13754
Close 13754
NTCreateX \clients\client1\~dmtmp\COREL\ROSE.CPT 0x40 0x1 13755
QUERY_FILE_INFORMATION 13755
QUERY_FILE_INFORMATION 13755
Close 13755
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 13756
QUERY_FILE_INFORMATION 13756
Close 13756
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x200000 0x1 13757
Close 13757
Rename \clients\client1\~dmtmp\COREL\GRAPH2.CDR \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x2 13759
WriteX 13759 8191 1 1
QUERY_FILE_INFORMATION 13759
WriteX 13759 0 30183 30183
Close 13759
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.BAK 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x200000 0x1 13760
Close 13760
Rename \clients\client1\~dmtmp\COREL\@@@CDRW.TMP \clients\client1\~dmtmp\COREL\GRAPH2.BAK
NTCreateX \clients\client1\~dmtmp\COREL\CDRBARS.CFG 0x40 0x1 13761
WriteX 13761 0 510 510
WriteX 13761 510 512 512
WriteX 13761 1022 510 510
WriteX 13761 1532 510 510
WriteX 13761 2042 168 168
Close 13761
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 13762
Close 13762
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\CDRROLS.CFG 0x40 0x1 13763
WriteX 13763 0 511 511
WriteX 13763 511 512 512
WriteX 13763 1023 512 512
WriteX 13763 1535 488 488
Close 13763
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13764
ReadX 13764 0 65471 65471
ReadX 13764 65471 63 63
ReadX 13764 65534 65471 65471
ReadX 13764 131005 63 63
ReadX 13764 131068 65471 65471
ReadX 13764 196539 63 63
ReadX 13764 196602 65471 65471
ReadX 13764 262073 63 63
ReadX 13764 262136 65471 65471
ReadX 13764 327607 63 63
ReadX 13764 327670 10 10
Close 13764
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13765
ReadX 13765 0 65471 65471
ReadX 13765 65471 63 63
ReadX 13765 65534 65471 65471
ReadX 13765 131005 63 63
ReadX 13765 131068 65471 65471
ReadX 13765 196539 63 63
ReadX 13765 196602 65471 65471
ReadX 13765 262073 63 63
ReadX 13765 262136 65471 65471
ReadX 13765 327607 63 63
ReadX 13765 327670 65471 65471
ReadX 13765 393141 63 63
ReadX 13765 393204 65471 65471
ReadX 13765 458675 63 63
ReadX 13765 458738 65471 65471
ReadX 13765 524209 63 63
ReadX 13765 524272 65471 65471
ReadX 13765 589743 63 63
ReadX 13765 589806 65471 65471
ReadX 13765 655277 63 63
ReadX 13765 655340 32 32
Close 13765
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13766
ReadX 13766 0 65471 65471
ReadX 13766 65471 63 63
ReadX 13766 65534 65471 65471
ReadX 13766 131005 63 63
ReadX 13766 131068 65471 65471
ReadX 13766 196539 63 63
ReadX 13766 196602 65471 65471
ReadX 13766 262073 63 63
ReadX 13766 262136 65471 65471
ReadX 13766 327607 63 63
ReadX 13766 327670 65471 65471
ReadX 13766 393141 63 63
ReadX 13766 393204 65471 65471
ReadX 13766 458675 63 63
ReadX 13766 458738 65471 65471
ReadX 13766 524209 63 63
ReadX 13766 524272 65471 65471
ReadX 13766 589743 63 63
ReadX 13766 589806 65471 65471
ReadX 13766 655277 63 63
ReadX 13766 655340 65471 65471
ReadX 13766 720811 63 63
ReadX 13766 720874 65471 65471
ReadX 13766 786345 63 63
ReadX 13766 786408 65471 65471
ReadX 13766 851879 63 63
ReadX 13766 851942 65471 65471
ReadX 13766 917413 63 63
ReadX 13766 917476 65471 65471
ReadX 13766 982947 63 63
ReadX 13766 983010 65471 65471
ReadX 13766 1048481 63 63
ReadX 13766 1048544 65471 65471
ReadX 13766 1114015 63 63
ReadX 13766 1114078 65471 65471
ReadX 13766 1179549 63 63
ReadX 13766 1179612 65471 65471
ReadX 13766 1245083 63 63
ReadX 13766 1245146 65471 65471
ReadX 13766 1310617 63 63
ReadX 13766 1310680 65471 65471
ReadX 13766 1376151 63 63
ReadX 13766 1376214 65471 65471
ReadX 13766 1441685 63 63
ReadX 13766 1441748 65471 65471
ReadX 13766 1507219 63 63
ReadX 13766 1507282 65471 65471
ReadX 13766 1572753 63 63
ReadX 13766 1572816 65471 65471
ReadX 13766 1638287 63 63
ReadX 13766 1638350 65471 65471
ReadX 13766 1703821 63 63
ReadX 13766 1703884 65471 65471
ReadX 13766 1769355 63 63
ReadX 13766 1769418 65471 65471
ReadX 13766 1834889 63 63
ReadX 13766 1834952 32824 32824
Close 13766
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW 1
NTCreateX \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS 0x40 0x1 13767
QUERY_FILE_INFORMATION 13767
ReadX 13767 0 512 512
ReadX 13767 512 512 512
ReadX 13767 1024 512 512
QUERY_FILE_INFORMATION 13767
QUERY_FILE_INFORMATION 13767
ReadX 13767 512 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FILE_INFORMATION 13767
QUERY_FILE_INFORMATION 13767
ReadX 13767 512 4096 4096
QUERY_FILE_INFORMATION 13767
QUERY_FILE_INFORMATION 13767
QUERY_FILE_INFORMATION 13767
WriteX 13767 512 4096 4096
WriteX 13767 1024 512 512
ReadX 13767 502 512 512
QUERY_FILE_INFORMATION 13767
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13767 2560 512 512
ReadX 13767 1536 512 512
ReadX 13767 2176 384 384
ReadX 13767 3072 128 128
ReadX 13767 3107 512 512
ReadX 13767 3619 512 512
ReadX 13767 4131 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13767 286 123 123
ReadX 13767 292 24 24
ReadX 13767 512 2048 2048
ReadX 13767 512 2048 2048
ReadX 13767 2560 2048 2048
ReadX 13767 416 1536 1536
ReadX 13767 768 512 512
ReadX 13767 1280 2048 2048
ReadX 13767 3328 2048 2048
ReadX 13767 5376 2048 2048
ReadX 13767 7424 2048 2048
ReadX 13767 9472 2048 2048
ReadX 13767 11520 2048 2048
ReadX 13767 13568 2048 2048
ReadX 13767 15616 2048 2048
ReadX 13767 17664 2048 2048
ReadX 13767 19712 2048 2048
ReadX 13767 21760 2048 2048
ReadX 13767 23808 2048 2048
ReadX 13767 25856 2048 2048
ReadX 13767 27904 2048 2048
ReadX 13767 29952 2048 2048
ReadX 13767 32000 2048 2048
ReadX 13767 34048 2048 2048
ReadX 13767 36096 2048 2048
ReadX 13767 38144 2048 2048
ReadX 13767 40192 2048 2048
ReadX 13767 42240 512 512
ReadX 13767 42752 2048 2048
ReadX 13767 44800 2048 2048
ReadX 13767 46848 2048 2048
ReadX 13767 48896 2048 2048
ReadX 13767 50944 2048 2048
ReadX 13767 52992 2048 2048
ReadX 13767 55040 2048 2048
ReadX 13767 57088 2048 2048
ReadX 13767 316 2048 2048
ReadX 13767 2364 2048 2048
ReadX 13767 4412 2048 2048
ReadX 13767 6460 2048 2048
ReadX 13767 8508 2048 2048
ReadX 13767 10556 2048 2048
ReadX 13767 12604 2048 2048
ReadX 13767 14652 2048 2048
ReadX 13767 16700 2048 2048
ReadX 13767 18748 2048 2048
ReadX 13767 20796 2048 2048
ReadX 13767 22844 2048 2048
ReadX 13767 24892 2048 2048
ReadX 13767 26940 2048 2048
ReadX 13767 28988 2048 2048
ReadX 13767 31036 2048 2048
ReadX 13767 436 2048 2048
ReadX 13767 2484 2048 2048
ReadX 13767 4532 2048 2048
ReadX 13767 6580 2048 2048
ReadX 13767 8628 2048 2048
ReadX 13767 10676 2048 2048
ReadX 13767 476 2048 2048
ReadX 13767 476 2048 2048
ReadX 13767 476 2048 2048
ReadX 13767 2524 2048 2048
ReadX 13767 484 2048 2048
ReadX 13767 484 2048 2048
ReadX 13767 484 2048 2048
ReadX 13767 2532 665 665
ReadX 13767 492 665 665
ReadX 13767 492 665 665
ReadX 13767 492 665 665
ReadX 13767 296 512 512
ReadX 13767 318 512 512
ReadX 13767 300 512 512
ReadX 13767 312 512 512
ReadX 13767 320 512 512
ReadX 13767 832 354 354
ReadX 13767 504 4096 4096
ReadX 13767 496 1428 1428
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x2 13768
Close 13768
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\5D7C0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\5D7C0000 0x40 0x2 13769
WriteX 13769 1535 1 1
QUERY_FILE_INFORMATION 13769
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13767 296 1251 1251
ReadX 13767 2176 384 384
ReadX 13767 3072 1634 1634
QUERY_FILE_INFORMATION 13769
WriteX 13769 0 57088 57088
WriteX 13769 0 4096 4096
Flush 13769
Close 13767
NTCreateX \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS 0x40 0x1 13770
Close 13770
WriteX 13769 0 4096 4096
Close 13769
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\5D7C0000
NTCreateX \clients\client1\~dmtmp\EXCEL\5D7C0000 0x200000 0x1 13771
Close 13771
Rename \clients\client1\~dmtmp\EXCEL\5D7C0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 13772
QUERY_FILE_INFORMATION 13772
ReadX 13772 0 512 512
ReadX 13772 512 512 512
ReadX 13772 1024 512 512
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
ReadX 13772 512 2048 2048
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13772 4096 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\0BBC0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\0BBC0000 0x40 0x2 13773
WriteX 13773 1535 1 1
QUERY_FILE_INFORMATION 13773
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13772 1536 512 512
ReadX 13772 288 1251 1251
ReadX 13772 2048 2018 2018
QUERY_FILE_INFORMATION 13773
WriteX 13773 0 51456 51456
WriteX 13773 0 4096 4096
Flush 13773
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
Close 13772
WriteX 13773 0 4096 4096
Close 13773
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\0BBC0000
NTCreateX \clients\client1\~dmtmp\EXCEL\0BBC0000 0x200000 0x1 13774
Close 13774
Rename \clients\client1\~dmtmp\EXCEL\0BBC0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 13775
QUERY_FILE_INFORMATION 13775
ReadX 13775 0 512 512
ReadX 13775 512 512 512
ReadX 13775 1024 512 512
QUERY_FILE_INFORMATION 13775
QUERY_FILE_INFORMATION 13775
ReadX 13775 512 2048 2048
QUERY_FILE_INFORMATION 13775
QUERY_FILE_INFORMATION 13775
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13775 4096 512 512
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x2 13777
Close 13777
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x2 13779
WriteX 13779 4045 1 1
QUERY_FILE_INFORMATION 13779
WriteX 13779 0 53077 53077
Close 13779
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\51EC0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\51EC0000 0x40 0x2 13780
WriteX 13780 1535 1 1
QUERY_FILE_INFORMATION 13780
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13775 1536 512 512
ReadX 13775 288 1251 1251
ReadX 13775 2048 2018 2018
QUERY_FILE_INFORMATION 13780
WriteX 13780 0 65471 65471
WriteX 13780 65471 65 65
WriteX 13780 65536 1856 1856
WriteX 13780 0 4096 4096
Flush 13780
QUERY_FILE_INFORMATION 13775
QUERY_FILE_INFORMATION 13775
Close 13775
WriteX 13780 0 4096 4096
Close 13780
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\51EC0000
NTCreateX \clients\client1\~dmtmp\EXCEL\51EC0000 0x200000 0x1 13781
Close 13781
Rename \clients\client1\~dmtmp\EXCEL\51EC0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 13782
QUERY_FILE_INFORMATION 13782
ReadX 13782 0 512 512
ReadX 13782 512 512 512
ReadX 13782 1024 512 512
QUERY_FILE_INFORMATION 13782
QUERY_FILE_INFORMATION 13782
ReadX 13782 576 2048 2048
QUERY_FILE_INFORMATION 13782
QUERY_FILE_INFORMATION 13782
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x2 13784
Close 13784
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x2 13786
WriteX 13786 4076 1 1
QUERY_FILE_INFORMATION 13786
WriteX 13786 0 7983 7983
Close 13786
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x2 13788
Close 13788
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x2 13790
WriteX 13790 4095 1 1
QUERY_FILE_INFORMATION 13790
WriteX 13790 0 65471 65471
WriteX 13790 65471 65 65
WriteX 13790 65536 65471 65471
WriteX 13790 131007 65 65
WriteX 13790 131072 65471 65471
WriteX 13790 196543 65 65
WriteX 13790 196608 65471 65471
WriteX 13790 262079 65 65
WriteX 13790 262144 65471 65471
WriteX 13790 327615 65 65
WriteX 13790 327680 65471 65471
WriteX 13790 393151 65 65
WriteX 13790 393216 65471 65471
WriteX 13790 458687 65 65
WriteX 13790 458752 46731 46731
Close 13790
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\62AD0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\62AD0000 0x40 0x2 13791
WriteX 13791 1535 1 1
QUERY_FILE_INFORMATION 13791
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13782 1536 512 512
ReadX 13782 2048 2018 2018
ReadX 13782 4096 512 512
ReadX 13782 4608 2197 2197
QUERY_FILE_INFORMATION 13791
WriteX 13791 0 65471 65471
WriteX 13791 65471 65 65
WriteX 13791 65536 22848 22848
WriteX 13791 0 4096 4096
Flush 13791
QUERY_FILE_INFORMATION 13782
QUERY_FILE_INFORMATION 13782
Close 13782
WriteX 13791 0 4096 4096
Close 13791
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\62AD0000
NTCreateX \clients\client1\~dmtmp\EXCEL\62AD0000 0x200000 0x1 13792
Close 13792
Rename \clients\client1\~dmtmp\EXCEL\62AD0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 13793
QUERY_FILE_INFORMATION 13793
ReadX 13793 0 512 512
ReadX 13793 512 512 512
ReadX 13793 1024 512 512
QUERY_FILE_INFORMATION 13793
QUERY_FILE_INFORMATION 13793
ReadX 13793 576 2048 2048
QUERY_FILE_INFORMATION 13793
QUERY_FILE_INFORMATION 13793
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 4096 512 512
Close 13793
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLA 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLT 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLM 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLW 1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES.XLS 0x40 0x1 13794
QUERY_FILE_INFORMATION 13794
ReadX 13794 0 512 512
ReadX 13794 512 512 512
ReadX 13794 1024 512 512
QUERY_FILE_INFORMATION 13794
QUERY_FILE_INFORMATION 13794
ReadX 13794 288 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FILE_INFORMATION 13794
QUERY_FILE_INFORMATION 13794
ReadX 13794 288 4096 4096
QUERY_FILE_INFORMATION 13794
QUERY_FILE_INFORMATION 13794
QUERY_FILE_INFORMATION 13794
WriteX 13794 288 4096 4096
WriteX 13794 1024 512 512
ReadX 13794 1536 512 512
QUERY_FILE_INFORMATION 13794
ReadX 13794 288 2048 2048
ReadX 13794 2336 2048 2048
ReadX 13794 3072 1536 1536
ReadX 13794 544 512 512
ReadX 13794 1056 2048 2048
ReadX 13794 3104 2048 2048
ReadX 13794 5152 2048 2048
ReadX 13794 7200 2048 2048
ReadX 13794 9248 2048 2048
ReadX 13794 11296 2048 2048
ReadX 13794 13344 2048 2048
ReadX 13794 15392 2048 2048
ReadX 13794 17440 2048 2048
ReadX 13794 19488 2048 2048
ReadX 13794 21536 2048 2048
ReadX 13794 23584 2048 2048
ReadX 13794 25632 2048 2048
ReadX 13794 27680 2048 2048
ReadX 13794 29728 2048 2048
ReadX 13794 31776 2048 2048
ReadX 13794 33824 2048 2048
ReadX 13794 35872 2048 2048
ReadX 13794 37920 2048 2048
ReadX 13794 39968 2048 2048
ReadX 13794 42016 512 512
ReadX 13794 42528 512 512
ReadX 13794 43040 1536 1536
ReadX 13794 44576 2048 2048
ReadX 13794 46624 2048 2048
ReadX 13794 48672 2048 2048
ReadX 13794 50720 2048 2048
ReadX 13794 52768 2048 2048
ReadX 13794 54816 2048 2048
ReadX 13794 56864 2048 2048
ReadX 13794 58912 2048 2048
ReadX 13794 60960 2048 2048
ReadX 13794 63008 2048 2048
ReadX 13794 65056 2048 2048
ReadX 13794 67104 2048 2048
ReadX 13794 69152 2048 2048
ReadX 13794 71200 2048 2048
ReadX 13794 73248 2048 2048
ReadX 13794 75296 2048 2048
ReadX 13794 77344 2048 2048
ReadX 13794 79392 2048 2048
ReadX 13794 81440 2048 2048
ReadX 13794 83488 2048 2048
ReadX 13794 85536 512 512
ReadX 13794 86048 512 512
ReadX 13794 86560 1536 1536
ReadX 13794 88096 2048 2048
ReadX 13794 90144 2048 2048
ReadX 13794 92192 2048 2048
ReadX 13794 94240 2048 2048
ReadX 13794 96288 2048 2048
ReadX 13794 552 2048 2048
ReadX 13794 2600 2048 2048
ReadX 13794 4648 2048 2048
ReadX 13794 6696 2048 2048
ReadX 13794 8744 2048 2048
ReadX 13794 10792 2048 2048
ReadX 13794 12840 2048 2048
ReadX 13794 14888 2048 2048
ReadX 13794 16936 2048 2048
ReadX 13794 18984 2048 2048
ReadX 13794 21032 2048 2048
ReadX 13794 23080 2048 2048
ReadX 13794 25128 2048 2048
ReadX 13794 27176 2048 2048
ReadX 13794 29224 2048 2048
ReadX 13794 31272 2048 2048
ReadX 13794 33320 2048 2048
ReadX 13794 35368 2048 2048
ReadX 13794 37416 2048 2048
ReadX 13794 39464 2048 2048
ReadX 13794 41512 512 512
ReadX 13794 42024 512 512
ReadX 13794 42536 1536 1536
ReadX 13794 44072 2048 2048
ReadX 13794 46120 2048 2048
ReadX 13794 48168 2048 2048
ReadX 13794 50216 2048 2048
ReadX 13794 52264 2048 2048
ReadX 13794 54312 2048 2048
ReadX 13794 56360 2048 2048
ReadX 13794 58408 2048 2048
ReadX 13794 60456 2048 2048
ReadX 13794 62504 2048 2048
ReadX 13794 64552 2048 2048
ReadX 13794 66600 2048 2048
ReadX 13794 68648 2048 2048
ReadX 13794 70696 2048 2048
ReadX 13794 72744 2048 2048
ReadX 13794 74792 2048 2048
ReadX 13794 76840 2048 2048
ReadX 13794 78888 2048 2048
ReadX 13794 80936 2048 2048
ReadX 13794 82984 2048 2048
ReadX 13794 85032 512 512
ReadX 13794 85544 2048 2048
ReadX 13794 87592 2048 2048
ReadX 13794 89640 2048 2048
ReadX 13794 91688 2048 2048
ReadX 13794 93736 2048 2048
ReadX 13794 95784 2048 2048
ReadX 13794 97832 2048 2048
ReadX 13794 99880 2048 2048
ReadX 13794 101928 2048 2048
ReadX 13794 103976 2048 2048
ReadX 13794 106024 2048 2048
ReadX 13794 108072 2048 2048
ReadX 13794 110120 2048 2048
ReadX 13794 112168 2048 2048
ReadX 13794 114216 2048 2048
ReadX 13794 116264 2048 2048
ReadX 13794 118312 2048 2048
ReadX 13794 120360 2048 2048
ReadX 13794 122408 2048 2048
ReadX 13794 124456 512 512
ReadX 13794 124968 512 512
ReadX 13794 125480 1536 1536
ReadX 13794 127016 2048 2048
ReadX 13794 129064 2048 2048
ReadX 13794 131112 2048 2048
ReadX 13794 133160 2048 2048
ReadX 13794 135208 2048 2048
ReadX 13794 137256 2048 2048
ReadX 13794 139304 2048 2048
ReadX 13794 141352 2048 2048
ReadX 13794 143400 2048 2048
ReadX 13794 145448 2048 2048
ReadX 13794 147496 2048 2048
ReadX 13794 149544 2048 2048
ReadX 13794 151592 2048 2048
ReadX 13794 153640 2048 2048
ReadX 13794 155688 2048 2048
ReadX 13794 157736 2048 2048
ReadX 13794 159784 2048 2048
ReadX 13794 161832 2048 2048
ReadX 13794 163880 2048 2048
ReadX 13794 165928 2048 2048
ReadX 13794 167976 2048 2048
ReadX 13794 170024 512 512
ReadX 13794 1538 1536 1536
ReadX 13794 3074 2048 2048
ReadX 13794 5122 2048 2048
ReadX 13794 7170 2048 2048
ReadX 13794 9218 2048 2048
ReadX 13794 11266 2048 2048
ReadX 13794 13314 2048 2048
ReadX 13794 15362 2048 2048
ReadX 13794 17410 2048 2048
ReadX 13794 19458 2048 2048
ReadX 13794 21506 2048 2048
ReadX 13794 23554 2048 2048
ReadX 13794 25602 2048 2048
ReadX 13794 27650 2048 2048
ReadX 13794 29698 2048 2048
ReadX 13794 31746 2048 2048
ReadX 13794 33794 2048 2048
ReadX 13794 35842 2048 2048
ReadX 13794 37890 2048 2048
ReadX 13794 39938 2048 2048
ReadX 13794 41986 2048 2048
ReadX 13794 44034 875 875
ReadX 13794 1730 4096 4096
ReadX 13794 1724 1536 1536
ReadX 13794 1746 588 588
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLS
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1 1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.XLS 0x40 0x2 13795
Close 13795
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.XLS 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\E0BD0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\E0BD0000 0x40 0x2 13796
WriteX 13796 2047 1 1
QUERY_FILE_INFORMATION 13796
Close 13794
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES.XLS 0x40 0x1 13797
Close 13797
WriteX 13796 0 42388 42388
Close 13796
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.XLS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\E0BD0000
NTCreateX \clients\client1\~dmtmp\EXCEL\E0BD0000 0x200000 0x1 13798
Close 13798
Rename \clients\client1\~dmtmp\EXCEL\E0BD0000 \clients\client1\~dmtmp\EXCEL\SALES1.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.XLS 0x40 0x1 13799
QUERY_FILE_INFORMATION 13799
ReadX 13799 0 512 512
ReadX 13799 1756 512 512
ReadX 13799 2268 512 512
QUERY_FILE_INFORMATION 13799
QUERY_FILE_INFORMATION 13799
ReadX 13799 1744 512 512
ReadX 13799 2256 512 512
ReadX 13799 2768 512 512
ReadX 13799 3280 512 512
ReadX 13799 3792 512 512
ReadX 13799 4304 512 512
ReadX 13799 512 2048 2048
QUERY_FILE_INFORMATION 13799
QUERY_FILE_INFORMATION 13799
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\BEED0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\BEED0000 0x40 0x2 13800
WriteX 13800 2047 1 1
QUERY_FILE_INFORMATION 13800
QUERY_FILE_INFORMATION 13799
QUERY_FILE_INFORMATION 13799
Close 13799
WriteX 13800 0 42652 42652
Close 13800
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\BEED0000
NTCreateX \clients\client1\~dmtmp\EXCEL\BEED0000 0x200000 0x1 13801
Close 13801
Rename \clients\client1\~dmtmp\EXCEL\BEED0000 \clients\client1\~dmtmp\EXCEL\SALES1.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.XLS 0x40 0x1 13802
QUERY_FILE_INFORMATION 13802
ReadX 13802 0 512 512
ReadX 13802 1762 512 512
ReadX 13802 2274 512 512
QUERY_FILE_INFORMATION 13802
QUERY_FILE_INFORMATION 13802
ReadX 13802 1750 512 512
ReadX 13802 2262 512 512
ReadX 13802 2774 512 512
ReadX 13802 3286 512 512
ReadX 13802 3798 512 512
ReadX 13802 4310 512 512
ReadX 13802 512 2048 2048
QUERY_FILE_INFORMATION 13802
QUERY_FILE_INFORMATION 13802
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.PRN 1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x2 13804
Close 13804
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x2 13806
WriteX 13806 4080 1 1
QUERY_FILE_INFORMATION 13806
WriteX 13806 0 65471 65471
WriteX 13806 65471 65 65
WriteX 13806 65536 49 49
Close 13806
Close 13802
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13807
WriteX 13807 0 65471 65471
WriteX 13807 65471 63 63
WriteX 13807 65534 65471 65471
WriteX 13807 131005 63 63
Close 13807
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13808
WriteX 13808 0 65471 65471
WriteX 13808 65471 63 63
WriteX 13808 65534 65471 65471
WriteX 13808 131005 63 63
WriteX 13808 131068 65471 65471
WriteX 13808 196539 63 63
WriteX 13808 196602 65471 65471
WriteX 13808 262073 63 63
Close 13808
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13809
WriteX 13809 0 65471 65471
WriteX 13809 65471 63 63
WriteX 13809 65534 65471 65471
WriteX 13809 131005 63 63
WriteX 13809 131068 65471 65471
WriteX 13809 196539 63 63
WriteX 13809 196602 65471 65471
WriteX 13809 262073 63 63
WriteX 13809 262136 65471 65471
WriteX 13809 327607 63 63
WriteX 13809 327670 65471 65471
WriteX 13809 393141 63 63
WriteX 13809 393204 65471 65471
WriteX 13809 458675 63 63
WriteX 13809 458738 65471 65471
WriteX 13809 524209 63 63
Close 13809
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\PMC162.TMP 0x40 0x2 13810
Close 13810
Unlink \clients\client1\~dmtmp\PM\PMC162.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMC162.TMP 0x40 0x2 13811
Close 13811
Unlink \clients\client1\~dmtmp\PM\PMC162.TMP
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\C 1
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC175.TMP 0x40 0x2 13814
Close 13814
Unlink \clients\client1\~dmtmp\PM\PMC175.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC176.TMP 0x40 0x2 13816
Close 13816
Unlink \clients\client1\~dmtmp\PM\PMC176.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMC180.TMP 0x40 0x2 13817
Close 13817
Unlink \clients\client1\~dmtmp\PM\PMC180.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\P 1
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC183.TMP 0x40 0x2 13820
Close 13820
Unlink \clients\client1\~dmtmp\PM\PMC183.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC183.TMP 0x40 0x2 13822
Close 13822
Unlink \clients\client1\~dmtmp\PM\PMC183.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMC183.TMP 0x40 0x2 13823
Close 13823
Unlink \clients\client1\~dmtmp\PM\PMC183.TMP
NTCreateX \clients\client1\~dmtmp\PM\B 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\B 1
NTCreateX \clients\client1\~dmtmp\PM\B 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 13826
Close 13826
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\B 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BE 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BE 1
NTCreateX \clients\client1\~dmtmp\PM\BE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 13830
Close 13830
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\BE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BEN 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BEN 1
NTCreateX \clients\client1\~dmtmp\PM\BEN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 13834
Close 13834
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\BEN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENC 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENC 1
NTCreateX \clients\client1\~dmtmp\PM\BENC 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 13838
Close 13838
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENC 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCH 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCH 1
NTCreateX \clients\client1\~dmtmp\PM\BENCH 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC185.TMP 0x40 0x2 13842
Close 13842
Unlink \clients\client1\~dmtmp\PM\PMC185.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCH 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCHD 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHD 1
NTCreateX \clients\client1\~dmtmp\PM\BENCHD 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC185.TMP 0x40 0x2 13846
Close 13846
Unlink \clients\client1\~dmtmp\PM\PMC185.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCHD 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDE 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHDE 1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC185.TMP 0x40 0x2 13850
Close 13850
Unlink \clients\client1\~dmtmp\PM\PMC185.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCHDE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDES 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHDES 1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDES 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC186.TMP 0x40 0x2 13854
Close 13854
Unlink \clients\client1\~dmtmp\PM\PMC186.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCHDES 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHDES 1
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\PMC1A2.TMP 0x40 0x2 13856
Close 13856
Unlink \clients\client1\~dmtmp\PM\PMC1A2.TMP
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BDES1.PRN 1
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x2 13858
Close 13858
Unlink \clients\client1\~dmtmp\PM\BDES1.PRN
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x2 13860
WriteX 13860 4095 1 1
QUERY_FILE_INFORMATION 13860
QUERY_FS_INFORMATION 259
WriteX 13860 0 65471 65471
WriteX 13860 65471 65 65
WriteX 13860 65536 65471 65471
WriteX 13860 131007 65 65
WriteX 13860 131072 65471 65471
WriteX 13860 196543 65 65
WriteX 13860 196608 65471 65471
WriteX 13860 262079 65 65
WriteX 13860 262144 26634 26634
Close 13860
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BDES1 1
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\T 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1.X 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1.XL 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13865
QUERY_FILE_INFORMATION 13865
QUERY_FILE_INFORMATION 13865
Close 13865
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13866
Close 13866
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13867
Close 13867
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13868
QUERY_FILE_INFORMATION 13868
ReadX 13868 0 512 512
ReadX 13868 288 512 512
ReadX 13868 800 512 512
Close 13868
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13869
ReadX 13869 0 24 24
Close 13869
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13870
ReadX 13870 0 24 24
Close 13870
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13871
QUERY_FILE_INFORMATION 13871
ReadX 13871 0 512 512
ReadX 13871 288 512 512
ReadX 13871 800 512 512
ReadX 13871 512 4096 4096
QUERY_FS_INFORMATION 259
ReadX 13871 1759 2849 2849
Close 13871
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 13872
Close 13872
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\C 1
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 13875
Close 13875
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 13877
Close 13877
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 13878
Close 13878
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\P 1
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD391.TMP 0x40 0x2 13881
Close 13881
Unlink \clients\client1\~dmtmp\PM\PMD391.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD391.TMP 0x40 0x2 13883
Close 13883
Unlink \clients\client1\~dmtmp\PM\PMD391.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13884
Close 13884
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\C 1
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13887
Close 13887
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CS 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CS 1
NTCreateX \clients\client1\~dmtmp\PM\CS 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13891
Close 13891
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\CS 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN 1
NTCreateX \clients\client1\~dmtmp\PM\CSN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13895
Close 13895
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13899
Close 13899
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_ 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_ 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_ 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD393.TMP 0x40 0x2 13903
Close 13903
Unlink \clients\client1\~dmtmp\PM\PMD393.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_ 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD393.TMP 0x40 0x2 13907
Close 13907
Unlink \clients\client1\~dmtmp\PM\PMD393.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD394.TMP 0x40 0x2 13910
Close 13910
Unlink \clients\client1\~dmtmp\PM\PMD394.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.P 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2.P 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD394.TMP 0x40 0x2 13914
Close 13914
Unlink \clients\client1\~dmtmp\PM\PMD394.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.PM 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2.PM 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.PM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD394.TMP 0x40 0x2 13918
Close 13918
Unlink \clients\client1\~dmtmp\PM\PMD394.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.PM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD395.TMP 0x40 0x2 13920
Close 13920
Unlink \clients\client1\~dmtmp\PM\PMD395.TMP
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\PMD3A4.TMP 0x40 0x2 13921
Close 13921
Unlink \clients\client1\~dmtmp\PM\PMD3A4.TMP
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2A 1
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\E 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EV 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVEN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.D 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DO 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13930
QUERY_FILE_INFORMATION 13930
QUERY_FILE_INFORMATION 13930
Close 13930
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13931
Close 13931
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13932
Close 13932
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13933
QUERY_FILE_INFORMATION 13933
ReadX 13933 0 512 512
ReadX 13933 288 512 512
ReadX 13933 800 512 512
Close 13933
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13934
ReadX 13934 0 24 24
Close 13934
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13935
QUERY_FILE_INFORMATION 13935
ReadX 13935 0 512 512
ReadX 13935 288 512 512
ReadX 13935 800 512 512
ReadX 13935 512 36 36
Close 13935
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13936
QUERY_FILE_INFORMATION 13936
ReadX 13936 0 512 512
ReadX 13936 288 512 512
ReadX 13936 800 512 512
ReadX 13936 512 682 682
ReadX 13936 3584 106 106
ReadX 13936 3712 10 10
ReadX 13936 3722 10 10
ReadX 13936 512 2048 2048
ReadX 13936 3072 512 512
ReadX 13936 276 84 84
ReadX 13936 273 49 49
ReadX 13936 2560 512 512
Close 13936
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\M 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MO 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOV 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED.D 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DO 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13946
QUERY_FILE_INFORMATION 13946
QUERY_FILE_INFORMATION 13946
Close 13946
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13947
Close 13947
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13948
Close 13948
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13949
QUERY_FILE_INFORMATION 13949
ReadX 13949 0 512 512
ReadX 13949 288 512 512
ReadX 13949 800 512 512
Close 13949
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13950
ReadX 13950 0 24 24
Close 13950
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13951
QUERY_FILE_INFORMATION 13951
ReadX 13951 0 512 512
ReadX 13951 288 512 512
ReadX 13951 800 512 512
ReadX 13951 512 36 36
Close 13951
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13952
QUERY_FILE_INFORMATION 13952
ReadX 13952 0 512 512
ReadX 13952 288 512 512
ReadX 13952 800 512 512
ReadX 13952 512 682 682
ReadX 13952 3072 106 106
ReadX 13952 3200 10 10
ReadX 13952 3210 10 10
ReadX 13952 512 2048 2048
ReadX 13952 2560 512 512
ReadX 13952 3887 84 84
ReadX 13952 3838 49 49
ReadX 13952 2048 512 512
Close 13952
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD
FIND_FIRST \clients\client1\~dmtmp\WORD\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC
Unlink \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
Unlink \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL
FIND_FIRST \clients\client1\~dmtmp\EXCEL\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.XLS
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.PRN
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT
FIND_FIRST \clients\client1\~dmtmp\PWRPNT\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
Unlink \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
Unlink \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL
FIND_FIRST \clients\client1\~dmtmp\COREL\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR
Unlink \clients\client1\~dmtmp\COREL\GRAPH1.CDR
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.BAK
Unlink \clients\client1\~dmtmp\COREL\GRAPH1.BAK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR
Unlink \clients\client1\~dmtmp\COREL\GRAPH2.CDR
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.BAK
Unlink \clients\client1\~dmtmp\COREL\GRAPH2.BAK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO
FIND_FIRST \clients\client1\~dmtmp\WORDPRO\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
FIND_FIRST \clients\client1\~dmtmp\PM\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BDES1.PRN
Unlink \clients\client1\~dmtmp\PM\BDES1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX
FIND_FIRST \clients\client1\~dmtmp\PARADOX\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.VAL
Unlink \clients\client1\~dmtmp\PARADOX\COURSES.VAL
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\CHANGED.DB
Unlink \clients\client1\~dmtmp\PARADOX\CHANGED.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.MB
Unlink \clients\client1\~dmtmp\PARADOX\ANSWER.MB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.DB
Unlink \clients\client1\~dmtmp\PARADOX\ANSWER.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS
FIND_FIRST \clients\client1\~dmtmp\ACCESS\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\INV.PRN
Unlink \clients\client1\~dmtmp\ACCESS\INV.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\SALES.PRN
Unlink \clients\client1\~dmtmp\ACCESS\SALES.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\LABELS.PRN
Unlink \clients\client1\~dmtmp\ACCESS\LABELS.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\SEED\*
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 13953
Close 13953
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 13954
QUERY_FILE_INFORMATION 13954
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.~TS
QUERY_FILE_INFORMATION 13954
QUERY_FILE_INFORMATION 13954
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 13955
QUERY_FILE_INFORMATION 13955
QUERY_FILE_INFORMATION 13955
QUERY_FILE_INFORMATION 13955
ReadX 13955 2156 24 24
ReadX 13955 2139 276 276
ReadX 13955 2136 14 14
ReadX 13955 2136 7 7
ReadX 13955 2138 12 12
ReadX 13955 2137 8 8
ReadX 13955 2135 15 15
ReadX 13955 0 16 16
ReadX 13955 16 2048 2048
ReadX 13955 2064 2048 2048
ReadX 13955 257 2048 2048
ReadX 13955 385 2048 2048
ReadX 13955 513 2048 2048
ReadX 13955 641 2048 2048
ReadX 13955 769 2048 2048
ReadX 13955 897 2048 2048
ReadX 13955 1025 2048 2048
ReadX 13955 1153 2048 2048
ReadX 13955 1281 2048 2048
ReadX 13955 1409 2048 2048
ReadX 13955 1537 408 408
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x2 13957
Close 13957
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13959
WriteX 13959 15 1 1
QUERY_FILE_INFORMATION 13959
WriteX 13959 0 10575 10575
Flush 13959
Close 13959
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13960
Close 13960
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 13961
QUERY_FILE_INFORMATION 13961
QUERY_FILE_INFORMATION 13961
QUERY_FILE_INFORMATION 13961
ReadX 13961 2157 24 24
ReadX 13961 2139 276 276
ReadX 13961 2137 14 14
ReadX 13961 2137 7 7
ReadX 13961 2139 12 12
ReadX 13961 2138 8 8
ReadX 13961 2136 15 15
Close 13955
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.~TS
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13962
Close 13962
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13963
QUERY_FILE_INFORMATION 13963
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13964
QUERY_FILE_INFORMATION 13964
ReadX 13964 0 512 512
ReadX 13964 512 512 512
ReadX 13964 1024 512 512
QUERY_FILE_INFORMATION 13964
QUERY_FILE_INFORMATION 13964
Close 13964
QUERY_FILE_INFORMATION 13963
ReadX 13963 0 24 24
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13965
QUERY_FILE_INFORMATION 13965
ReadX 13965 0 512 512
ReadX 13965 512 512 512
ReadX 13965 1024 512 512
ReadX 13965 288 20 20
ReadX 13965 308 2084 2084
ReadX 13965 388 2084 2084
ReadX 13965 388 2084 2084
ReadX 13954 2157 1386 1386
ReadX 13965 2472 399 399
ReadX 13965 3072 1536 1536
ReadX 13965 544 149 149
ReadX 13965 693 485 485
Close 13965
ReadX 13954 2157 4096 4096
ReadX 13954 6253 4096 4096
ReadX 13954 10349 4096 4096
ReadX 13954 14445 4096 4096
ReadX 13954 18541 4096 4096
ReadX 13954 22637 256 256
ReadX 13954 22893 4096 4096
ReadX 13954 26989 4096 4096
ReadX 13954 31085 4096 4096
ReadX 13954 35181 4096 4096
ReadX 13954 39277 4096 4096
ReadX 13954 43373 4096 4096
ReadX 13954 47469 4096 4096
QUERY_FS_INFORMATION 259
ReadX 13954 2157 1024 1024
ReadX 13954 1667 4688 4688
ReadX 13954 6355 3516 3516
ReadX 13954 9871 16384 16384
ReadX 13954 26255 3771 3771
ReadX 13954 30026 2048 2048
ReadX 13954 32074 1024 1024
ReadX 13954 33098 6652 6652
ReadX 13954 39750 16384 16384
ReadX 13954 56134 10496 10496
ReadX 13954 66630 1784 1784
ReadX 13954 68414 90 90
ReadX 13954 68504 273 273
ReadX 13954 68777 1600 1600
ReadX 13954 70377 640 640
ReadX 13954 71017 1280 1280
ReadX 13954 72297 8464 8464
ReadX 13954 80761 158 158
ReadX 13954 80919 912 912
ReadX 13954 81831 1980 1980
ReadX 13954 83811 2256 2256
ReadX 13954 86067 400 400
ReadX 13954 86467 252 252
ReadX 13954 86719 42 42
ReadX 13954 86761 725 725
ReadX 13954 2009 512 512
ReadX 13954 3895 9 9
ReadX 13954 3781 46 46
ReadX 13954 4059 92 92
ReadX 13954 3781 92 92
ReadX 13954 3986 184 184
ReadX 13954 3987 16384 16384
ReadX 13954 3902 16384 16384
ReadX 13954 3781 10240 10240
ReadX 13954 3821 16384 16384
ReadX 13954 3891 935 935
ReadX 13954 4060 10240 10240
ReadX 13954 4059 184 184
ReadX 13954 256 184 184
ReadX 13954 256 1026 1026
ReadX 13954 3901 326 326
ReadX 13954 3899 652 652
ReadX 13954 256 2 2
ReadX 13954 258 4948 4948
Close 13954
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x2 13967
Close 13967
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x2 13969
WriteX 13969 4055 1 1
QUERY_FILE_INFORMATION 13969
WriteX 13969 0 65471 65471
WriteX 13969 65471 65 65
WriteX 13969 65536 65471 65471
WriteX 13969 131007 65 65
WriteX 13969 131072 65471 65471
WriteX 13969 196543 65 65
WriteX 13969 196608 65471 65471
WriteX 13969 262079 65 65
WriteX 13969 262144 65471 65471
WriteX 13969 327615 65 65
WriteX 13969 327680 65471 65471
WriteX 13969 393151 65 65
WriteX 13969 393216 65471 65471
WriteX 13969 458687 65 65
WriteX 13969 458752 65471 65471
WriteX 13969 524223 65 65
WriteX 13969 524288 65471 65471
WriteX 13969 589759 65 65
WriteX 13969 589824 35257 35257
Close 13969
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x2 13971
Close 13971
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x2 13973
WriteX 13973 4055 1 1
QUERY_FILE_INFORMATION 13973
WriteX 13973 0 65471 65471
WriteX 13973 65471 65 65
WriteX 13973 65536 65471 65471
WriteX 13973 131007 65 65
WriteX 13973 131072 65471 65471
WriteX 13973 196543 65 65
WriteX 13973 196608 65471 65471
WriteX 13973 262079 65 65
WriteX 13973 262144 65471 65471
WriteX 13973 327615 65 65
WriteX 13973 327680 65471 65471
WriteX 13973 393151 65 65
WriteX 13973 393216 65471 65471
WriteX 13973 458687 65 65
WriteX 13973 458752 65471 65471
WriteX 13973 524223 65 65
WriteX 13973 524288 65471 65471
WriteX 13973 589759 65 65
WriteX 13973 589824 57598 57598
Close 13973
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13975
WriteX 13975 15 1 1
QUERY_FILE_INFORMATION 13975
WriteX 13975 0 12543 12543
Flush 13975
Close 13975
Close 13961
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13976
Close 13976
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 13977
QUERY_FILE_INFORMATION 13977
QUERY_FILE_INFORMATION 13977
QUERY_FILE_INFORMATION 13977
ReadX 13977 288 24 24
ReadX 13977 287 276 276
ReadX 13977 286 14 14
ReadX 13977 286 7 7
ReadX 13977 287 12 12
ReadX 13977 287 8 8
ReadX 13977 286 15 15
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 13978
Close 13978
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 13979
QUERY_FILE_INFORMATION 13979
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS
QUERY_FILE_INFORMATION 13979
QUERY_FILE_INFORMATION 13979
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 13980
QUERY_FILE_INFORMATION 13980
QUERY_FILE_INFORMATION 13980
QUERY_FILE_INFORMATION 13980
ReadX 13980 1938 24 24
ReadX 13980 1920 276 276
ReadX 13980 1918 14 14
ReadX 13980 1918 7 7
ReadX 13980 1919 12 12
ReadX 13980 1919 8 8
ReadX 13980 1917 15 15
ReadX 13980 0 16 16
ReadX 13980 16 2048 2048
ReadX 13980 2064 2048 2048
ReadX 13980 257 2048 2048
ReadX 13980 385 2048 2048
ReadX 13980 513 2048 2048
ReadX 13980 641 2048 2048
ReadX 13980 769 2048 2048
ReadX 13980 897 2048 2048
ReadX 13980 1025 2048 2048
ReadX 13980 1153 1385 1385
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x2 13982
Close 13982
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13984
WriteX 13984 15 1 1
QUERY_FILE_INFORMATION 13984
WriteX 13984 0 11588 11588
Flush 13984
Close 13984
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13985
Close 13985
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 13986
QUERY_FILE_INFORMATION 13986
QUERY_FILE_INFORMATION 13986
QUERY_FILE_INFORMATION 13986
ReadX 13986 1909 24 24
ReadX 13986 1892 276 276
ReadX 13986 1889 14 14
ReadX 13986 1889 7 7
ReadX 13986 1891 12 12
ReadX 13986 1890 8 8
ReadX 13986 1888 15 15
Close 13980
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13988
WriteX 13988 15 1 1
QUERY_FILE_INFORMATION 13988
WriteX 13988 0 11615 11615
Flush 13988
Close 13988
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Close 13986
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13989
Close 13989
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 13990
QUERY_FILE_INFORMATION 13990
QUERY_FILE_INFORMATION 13990
QUERY_FILE_INFORMATION 13990
ReadX 13990 1947 24 24
ReadX 13990 1929 276 276
ReadX 13990 1927 14 14
ReadX 13990 1927 7 7
ReadX 13990 1929 12 12
ReadX 13990 1928 8 8
ReadX 13990 1926 15 15
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x2 13992
Close 13992
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x2 13994
WriteX 13994 4088 1 1
QUERY_FILE_INFORMATION 13994
WriteX 13994 0 65471 65471
WriteX 13994 65471 65 65
WriteX 13994 65536 16050 16050
Close 13994
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13979 1939 64 64
ReadX 13979 128 248 248
ReadX 13979 128 568 568
ReadX 13979 3872 1536 1536
ReadX 13979 3456 2560 2560
ReadX 13979 3136 512 512
ReadX 13979 2880 4096 4096
ReadX 13979 3264 3072 3072
ReadX 13979 320 4096 4096
ReadX 13979 1024 4096 4096
ReadX 13979 3616 4096 4096
ReadX 13979 1939 64 64
ReadX 13979 128 248 248
ReadX 13979 128 608 608
ReadX 13979 2858 1024 1024
ReadX 13979 2810 4096 4096
ReadX 13979 2826 4096 4096
ReadX 13979 2580 2048 2048
ReadX 13979 2800 2560 2560
ReadX 13979 2100 4096 4096
ReadX 13979 2084 4096 4096
ReadX 13979 868 4096 4096
ReadX 13979 2324 4096 4096
ReadX 13979 884 4096 4096
ReadX 13979 2604 1024 1024
ReadX 13979 580 4096 4096
ReadX 13979 596 4096 4096
ReadX 13979 2752 4096 4096
ReadX 13979 2842 1024 1024
ReadX 13979 660 4096 4096
ReadX 13979 2720 4096 4096
ReadX 13979 2736 4096 4096
ReadX 13979 628 4096 4096
ReadX 13979 2704 4096 4096
ReadX 13979 1556 4096 4096
ReadX 13979 576 4096 4096
ReadX 13979 3168 1536 1536
ReadX 13979 832 4096 4096
ReadX 13979 1088 4096 4096
ReadX 13979 1344 4096 4096
ReadX 13979 1600 4096 4096
ReadX 13979 1856 4096 4096
ReadX 13979 2112 4096 4096
ReadX 13979 1892 4096 4096
ReadX 13979 820 4096 4096
ReadX 13979 788 4096 4096
ReadX 13979 1604 4096 4096
ReadX 13979 3648 4096 4096
ReadX 13979 2608 4096 4096
ReadX 13979 548 4096 4096
ReadX 13979 740 4096 4096
ReadX 13979 1344 4096 4096
ReadX 13979 3392 4096 4096
ReadX 13979 3904 4096 4096
ReadX 13979 644 4096 4096
ReadX 13979 676 4096 4096
ReadX 13979 2688 4096 4096
ReadX 13979 320 4096 4096
ReadX 13979 900 4096 4096
ReadX 13979 1908 4096 4096
ReadX 13979 852 4096 4096
ReadX 13979 724 4096 4096
ReadX 13979 2292 4096 4096
ReadX 13979 612 4096 4096
ReadX 13979 388 4096 4096
ReadX 13979 2368 4096 4096
ReadX 13979 2624 4096 4096
ReadX 13979 500 4096 4096
ReadX 13979 356 4096 4096
ReadX 13979 1024 4096 4096
ReadX 13979 576 4096 4096
ReadX 13979 340 4096 4096
ReadX 13979 420 4096 4096
ReadX 13979 1600 4096 4096
ReadX 13979 404 4096 4096
ReadX 13979 1428 4096 4096
ReadX 13979 2656 4096 4096
ReadX 13979 2624 4096 4096
ReadX 13979 452 4096 4096
ReadX 13979 692 4096 4096
ReadX 13979 564 4096 4096
ReadX 13979 372 4096 4096
ReadX 13979 468 4096 4096
ReadX 13979 484 4096 4096
ReadX 13979 1088 4096 4096
ReadX 13979 1924 4096 4096
ReadX 13979 2768 4096 4096
ReadX 13979 832 4096 4096
ReadX 13979 836 4096 4096
ReadX 13979 1856 4096 4096
ReadX 13979 2640 4096 4096
ReadX 13979 436 4096 4096
ReadX 13979 1828 4096 4096
ReadX 13979 804 4096 4096
ReadX 13979 1860 4096 4096
ReadX 13979 1812 4096 4096
ReadX 13979 756 4096 4096
ReadX 13979 1636 4096 4096
ReadX 13979 772 4096 4096
ReadX 13979 2036 4096 4096
ReadX 13979 1220 4096 4096
ReadX 13979 1652 4096 4096
ReadX 13979 2588 4096 4096
ReadX 13979 916 4096 4096
ReadX 13979 260 4096 4096
ReadX 13979 932 4096 4096
ReadX 13979 2624 4096 4096
ReadX 13979 308 4096 4096
ReadX 13979 292 4096 4096
ReadX 13979 1140 4096 4096
ReadX 13979 276 4096 4096
ReadX 13979 2020 4096 4096
ReadX 13979 2880 4096 4096
ReadX 13979 516 4096 4096
ReadX 13979 1844 4096 4096
ReadX 13979 1124 4096 4096
ReadX 13979 3136 4096 4096
ReadX 13979 324 4096 4096
ReadX 13979 1156 4096 4096
ReadX 13979 1172 4096 4096
ReadX 13979 2112 4096 4096
ReadX 13979 2368 4096 4096
ReadX 13979 964 4096 4096
ReadX 13979 980 4096 4096
ReadX 13979 1012 4096 4096
ReadX 13979 532 4096 4096
ReadX 13979 1876 4096 4096
QUERY_FS_INFORMATION 259
ReadX 13979 1620 4096 4096
ReadX 13979 1604 4096 4096
ReadX 13979 2116 4096 4096
ReadX 13979 2132 4096 4096
ReadX 13979 2148 4096 4096
ReadX 13979 2276 4096 4096
ReadX 13979 1540 4096 4096
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x2 13996
Close 13996
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x2 13998
QUERY_FILE_INFORMATION 13963
WriteX 13998 4088 1 1
QUERY_FILE_INFORMATION 13998
QUERY_FILE_INFORMATION 13963
Close 13963
WriteX 13998 0 65471 65471
WriteX 13998 65471 65 65
WriteX 13998 65536 64850 64850
Close 13998
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 14000
WriteX 14000 15 1 1
QUERY_FILE_INFORMATION 14000
ReadX 13979 2068 4096 4096
ReadX 13979 1588 4096 4096
ReadX 13979 1572 4096 4096
WriteX 14000 0 18630 18630
Flush 14000
Close 14000
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Close 13990
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 14001
Close 14001
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 14002
QUERY_FILE_INFORMATION 14002
QUERY_FILE_INFORMATION 14002
QUERY_FILE_INFORMATION 14002
ReadX 14002 661 24 24
ReadX 14002 659 356 356
ReadX 14002 659 14 14
ReadX 14002 659 7 7
ReadX 14002 659 12 12
ReadX 14002 659 8 8
ReadX 14002 659 15 15
ReadX 14002 659 16 16
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS
ReadX 13979 612 4096 4096
ReadX 13979 564 4096 4096
ReadX 13979 1876 4096 4096
ReadX 13979 628 4096 4096
ReadX 13979 740 4096 4096
ReadX 13979 724 4096 4096
ReadX 13979 644 4096 4096
ReadX 13979 2324 4096 4096
ReadX 13979 660 4096 4096
ReadX 13979 852 4096 4096
ReadX 13979 868 4096 4096
Close 14002
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS
Close 13977
ReadX 13979 2368 4096 4096
ReadX 13979 1024 4096 4096
ReadX 13979 320 4096 4096
ReadX 13979 580 4096 4096
ReadX 13979 3136 512 512
ReadX 13979 2880 4096 4096
Close 13979
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 14003
WriteX 14003 0 65471 65471
WriteX 14003 65471 63 63
WriteX 14003 65534 65471 65471
WriteX 14003 131005 63 63
Close 14003
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 14004
WriteX 14004 0 65471 65471
WriteX 14004 65471 63 63
WriteX 14004 65534 65471 65471
WriteX 14004 131005 63 63
WriteX 14004 131068 65471 65471
WriteX 14004 196539 63 63
WriteX 14004 196602 65471 65471
WriteX 14004 262073 63 63
Close 14004
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 14005
WriteX 14005 0 65471 65471
WriteX 14005 65471 63 63
WriteX 14005 65534 65471 65471
WriteX 14005 131005 63 63
WriteX 14005 131068 65471 65471
WriteX 14005 196539 63 63
WriteX 14005 196602 65471 65471
WriteX 14005 262073 63 63
WriteX 14005 262136 65471 65471
WriteX 14005 327607 63 63
WriteX 14005 327670 65471 65471
WriteX 14005 393141 63 63
WriteX 14005 393204 65471 65471
WriteX 14005 458675 63 63
WriteX 14005 458738 65471 65471
WriteX 14005 524209 63 63
Close 14005
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 14006
Close 14006
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 14007
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 14007 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 14008
ReadX 14008 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 14009
ReadX 14009 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 14010
ReadX 14010 0 511 511
ReadX 14007 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 14007
Close 14008
Close 14009
Close 14010
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 14011
ReadX 14011 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 14012
ReadX 14012 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 14013
ReadX 14013 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 14014
ReadX 14014 0 511 511
ReadX 14011 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S3CF99.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.DB 0x40 0x2 14015
FIND_FIRST \clients\client1\~dmtmp\*
Close 14015
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.DB 0x40 0x1 14016
QUERY_FILE_INFORMATION 14016
WriteX 14016 2047 1 1
QUERY_FILE_INFORMATION 14016
WriteX 14016 0 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x2 14017
Close 14017
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x1 14018
WriteX 14018 52 1 1
QUERY_FILE_INFORMATION 14018
WriteX 14018 0 53 53
WriteX 14018 53 28 28
WriteX 14018 81 4 4
WriteX 14018 85 28 28
WriteX 14018 113 38 38
WriteX 14018 151 28 28
WriteX 14018 179 2 2
WriteX 14018 181 28 28
WriteX 14018 209 3 3
WriteX 14018 212 279 279
WriteX 14018 9 4 4
Close 14018
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x1 14019
ReadX 14019 0 53 53
ReadX 14019 53 28 28
ReadX 14019 81 4 4
ReadX 14019 85 28 28
ReadX 14019 113 38 38
ReadX 14019 151 28 28
ReadX 14019 179 2 2
ReadX 14019 181 28 28
ReadX 14019 209 3 3
Close 14019
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
Close 14011
Close 14012
Close 14013
Close 14014
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 14020
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 14020 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 14021
ReadX 14021 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 14022
ReadX 14022 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 14023
ReadX 14023 0 511 511
ReadX 14020 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x2 14025
Close 14025
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 14026
WriteX 14026 52 1 1
QUERY_FILE_INFORMATION 14026
WriteX 14026 0 53 53
WriteX 14026 53 28 28
WriteX 14026 81 28 28
WriteX 14026 109 28 28
WriteX 14026 137 28 28
WriteX 14026 165 28 28
WriteX 14026 193 28 28
WriteX 14026 221 28 28
WriteX 14026 249 4 4
WriteX 14026 253 4 4
WriteX 14026 257 4 4
WriteX 14026 261 28 28
WriteX 14026 289 2 2
WriteX 14026 291 2 2
WriteX 14026 293 2 2
WriteX 14026 295 248 248
WriteX 14026 9 4 4
Close 14026
Close 14020
Close 14021
Close 14022
Close 14023
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 14027
ReadX 14027 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 14028
ReadX 14028 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 14029
ReadX 14029 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 14030
ReadX 14030 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 14031
ReadX 14031 0 53 53
ReadX 14031 53 28 28
ReadX 14031 81 28 28
ReadX 14031 109 28 28
ReadX 14031 137 28 28
ReadX 14031 165 28 28
ReadX 14031 193 28 28
ReadX 14031 221 28 28
ReadX 14031 249 4 4
ReadX 14031 253 4 4
ReadX 14031 257 4 4
ReadX 14031 261 28 28
ReadX 14031 289 2 2
ReadX 14031 291 2 2
ReadX 14031 293 2 2
Close 14031
ReadX 14027 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 14027
Close 14028
Close 14029
Close 14030
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.VAL
Unlink \clients\client1\~dmtmp\PARADOX\__S31.VAL
Close 14016
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
Unlink \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 14032
Close 14032
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 14033
ReadX 14033 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 14034
ReadX 14034 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 14035
ReadX 14035 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 14036
ReadX 14036 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 14037
ReadX 14037 0 53 53
ReadX 14037 53 28 28
ReadX 14037 81 28 28
ReadX 14037 109 28 28
ReadX 14037 137 28 28
ReadX 14037 165 28 28
ReadX 14037 193 28 28
ReadX 14037 221 28 28
ReadX 14037 249 4 4
ReadX 14037 253 4 4
ReadX 14037 257 4 4
ReadX 14037 261 28 28
ReadX 14037 289 2 2
ReadX 14037 291 2 2
ReadX 14037 293 2 2
Close 14037
ReadX 14033 2048 2048 2048
Close 14033
Close 14034
Close 14035
Close 14036
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 14038
ReadX 14038 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 14039
ReadX 14039 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 14040
ReadX 14040 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 14041
ReadX 14041 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 14042
ReadX 14042 0 53 53
ReadX 14042 53 28 28
ReadX 14042 81 28 28
ReadX 14042 109 28 28
ReadX 14042 137 28 28
ReadX 14042 165 28 28
ReadX 14042 193 28 28
ReadX 14042 221 28 28
ReadX 14042 249 4 4
ReadX 14042 253 4 4
ReadX 14042 257 4 4
ReadX 14042 261 28 28
ReadX 14042 289 2 2
ReadX 14042 291 2 2
ReadX 14042 293 2 2
Close 14042
ReadX 14038 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x2 14046
FIND_FIRST \clients\client1\~dmtmp\*
Close 14046
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 14047
QUERY_FILE_INFORMATION 14047
WriteX 14047 2047 1 1
QUERY_FILE_INFORMATION 14047
WriteX 14047 0 2048 2048
Close 14047
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 14048
ReadX 14048 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
Close 14048
Close 14038
Close 14039
Close 14040
Close 14041
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 14049
ReadX 14049 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
WriteX 14049 4095 1 1
QUERY_FILE_INFORMATION 14049
WriteX 14049 2048 2048 2048
QUERY_FILE_INFORMATION 14049
Flush 14049
WriteX 14049 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 14050
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 14050 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 14051
ReadX 14051 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 14052
ReadX 14052 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 14053
ReadX 14053 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 14054
ReadX 14054 0 53 53
ReadX 14054 53 28 28
ReadX 14054 81 28 28
ReadX 14054 109 28 28
ReadX 14054 137 28 28
ReadX 14054 165 28 28
ReadX 14054 193 28 28
ReadX 14054 221 28 28
ReadX 14054 249 4 4
ReadX 14054 253 4 4
ReadX 14054 257 4 4
ReadX 14054 261 28 28
ReadX 14054 289 2 2
ReadX 14054 291 2 2
ReadX 14054 293 2 2
Close 14054
ReadX 14050 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x2 14058
FIND_FIRST \clients\client1\~dmtmp\*
Close 14058
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 14059
QUERY_FILE_INFORMATION 14059
WriteX 14059 2047 1 1
QUERY_FILE_INFORMATION 14059
WriteX 14059 0 2048 2048
Close 14059
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 14060
ReadX 14060 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x2 14064
Close 14064
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 14065
QUERY_FILE_INFORMATION 14065
WriteX 14065 2047 1 1
QUERY_FILE_INFORMATION 14065
WriteX 14065 0 2048 2048
Close 14065
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 14066
ReadX 14066 0 511 511
ReadX 14050 384 2048 2048
ReadX 14050 768 16384 16384
ReadX 14050 1792 14336 14336
Close 14066
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 14067
ReadX 14067 0 511 511
Close 14067
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 14069
Close 14069
Unlink \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB
WriteX 14060 4095 1 1
QUERY_FILE_INFORMATION 14060
WriteX 14060 2048 2048 2048
WriteX 14060 0 88 88
Close 14060
WriteX 14050 1152 2048 2048
WriteX 14050 1408 6144 6144
WriteX 14050 1920 2048 2048
WriteX 14050 0 88 88
Close 14050
WriteX 14051 0 88 88
Close 14051
WriteX 14052 0 88 88
Close 14052
Close 14053
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 14070
ReadX 14070 0 511 511
ReadX 14070 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\CHANGED.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 14070
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\TIMECHG 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\TIMECHG 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 14071
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 14071 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 14072
ReadX 14072 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 14073
ReadX 14073 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 14074
ReadX 14074 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 14075
ReadX 14075 0 53 53
ReadX 14075 53 28 28
ReadX 14075 81 28 28
ReadX 14075 109 28 28
ReadX 14075 137 28 28
ReadX 14075 165 28 28
ReadX 14075 193 28 28
ReadX 14075 221 28 28
ReadX 14075 249 4 4
ReadX 14075 253 4 4
ReadX 14075 257 4 4
ReadX 14075 261 28 28
ReadX 14075 289 2 2
ReadX 14075 291 2 2
ReadX 14075 293 2 2
Close 14075
ReadX 14071 2048 2048 2048
Close 14071
Close 14072
Close 14073
Close 14074
Close 14049
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 14076
QUERY_FILE_INFORMATION 14076
Close 14076
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
Unlink \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 14077
Close 14077
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 14078
ReadX 14078 0 511 511
ReadX 14078 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 14079
ReadX 14079 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 14080
ReadX 14080 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 14081
ReadX 14081 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 14082
ReadX 14082 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 14083
ReadX 14083 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 14084
ReadX 14084 0 53 53
ReadX 14084 53 2 2
ReadX 14084 55 2 2
ReadX 14084 57 184 184
ReadX 14084 241 298 298
Close 14084
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 14085
ReadX 14085 0 41 41
ReadX 14078 2048 2048 2048
Close 14085
Close 14078
Close 14079
Close 14082
Close 14083
Close 14080
Close 14081
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 14086
ReadX 14086 0 511 511
ReadX 14086 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 14087
ReadX 14087 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 14088
ReadX 14088 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 14089
ReadX 14089 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 14090
ReadX 14090 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 14091
ReadX 14091 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 14092
ReadX 14092 0 53 53
ReadX 14092 53 2 2
ReadX 14092 55 2 2
ReadX 14092 57 184 184
ReadX 14092 241 298 298
Close 14092
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 14093
ReadX 14093 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 14094
ReadX 14094 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 14095
ReadX 14095 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12514
ReadX 12514 0 511 511
ReadX 14095 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12515
ReadX 12515 0 53 53
ReadX 12515 53 2 2
ReadX 12515 55 480 480
ReadX 12515 535 2 2
Close 12515
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12516
ReadX 12516 0 41 41
ReadX 14086 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x2 12520
FIND_FIRST \clients\client1\~dmtmp\*
Close 12520
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 12521
QUERY_FILE_INFORMATION 12521
WriteX 12521 2047 1 1
QUERY_FILE_INFORMATION 12521
WriteX 12521 0 2048 2048
Close 12521
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 12522
ReadX 12522 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Close 12522
Close 14093
Close 14094
Close 14095
Close 12514
Close 12516
Close 14086
Close 14087
Close 14090
Close 14091
Close 14088
Close 14089
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 12523
ReadX 12523 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12524
Close 12524
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12525
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12525 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12526
ReadX 12526 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12527
ReadX 12527 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12528
ReadX 12528 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12529
ReadX 12529 0 53 53
ReadX 12529 53 2 2
ReadX 12529 55 480 480
ReadX 12529 535 2 2
Close 12529
ReadX 12525 2048 2048 2048
Close 12525
Close 12526
Close 12527
Close 12528
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12530
ReadX 12530 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12531
ReadX 12531 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12532
ReadX 12532 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12533
ReadX 12533 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12534
ReadX 12534 0 53 53
ReadX 12534 53 2 2
ReadX 12534 55 480 480
ReadX 12534 535 2 2
Close 12534
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12535
ReadX 12535 0 511 511
ReadX 12535 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12536
ReadX 12536 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12537
ReadX 12537 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12538
ReadX 12538 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12539
ReadX 12539 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12540
ReadX 12540 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12541
ReadX 12541 0 41 41
ReadX 12535 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12542
ReadX 12542 0 53 53
ReadX 12542 53 2 2
ReadX 12542 55 2 2
ReadX 12542 57 184 184
ReadX 12542 241 298 298
Close 12542
ReadX 12530 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x2 12546
FIND_FIRST \clients\client1\~dmtmp\*
Close 12546
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 12547
QUERY_FILE_INFORMATION 12547
WriteX 12547 2047 1 1
QUERY_FILE_INFORMATION 12547
WriteX 12547 0 2048 2048
Close 12547
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 12548
ReadX 12548 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
Close 12548
Close 12541
Close 12535
Close 12536
Close 12539
Close 12540
Close 12537
Close 12538
Close 12530
Close 12531
Close 12532
Close 12533
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 12549
ReadX 12549 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
WriteX 12523 4095 1 1
QUERY_FILE_INFORMATION 12523
WriteX 12523 2048 2048 2048
QUERY_FILE_INFORMATION 12523
Flush 12523
WriteX 12523 0 88 88
WriteX 12549 4095 1 1
QUERY_FILE_INFORMATION 12549
WriteX 12549 2048 2048 2048
QUERY_FILE_INFORMATION 12549
Flush 12549
WriteX 12549 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12550
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12550 0 511 511
ReadX 12550 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12551
ReadX 12551 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12552
ReadX 12552 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12553
ReadX 12553 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12554
ReadX 12554 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12555
ReadX 12555 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12556
ReadX 12556 0 53 53
ReadX 12556 53 2 2
ReadX 12556 55 2 2
ReadX 12556 57 184 184
ReadX 12556 241 298 298
Close 12556
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12557
ReadX 12557 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12558
ReadX 12558 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12559
ReadX 12559 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12560
ReadX 12560 0 511 511
ReadX 12559 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12561
ReadX 12561 0 53 53
ReadX 12561 53 2 2
ReadX 12561 55 480 480
ReadX 12561 535 2 2
Close 12561
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12562
ReadX 12562 0 41 41
ReadX 12550 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12563
ReadX 12563 0 53 53
ReadX 12563 53 2 2
ReadX 12563 55 480 480
ReadX 12563 535 2 2
Close 12563
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12564
ReadX 12564 0 53 53
ReadX 12564 53 2 2
ReadX 12564 55 2 2
ReadX 12564 57 184 184
ReadX 12564 241 298 298
Close 12564
ReadX 12557 2048 2048 2048
ReadX 12558 2048 2048 2048
ReadX 12557 320 16384 16384
ReadX 12557 384 16384 16384
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x2 12565
FIND_FIRST \clients\client1\~dmtmp\*
Close 12565
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x1 12566
QUERY_FILE_INFORMATION 12566
WriteX 12566 4095 1 1
QUERY_FILE_INFORMATION 12566
WriteX 12566 0 4096 4096
Close 12566
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x1 12567
ReadX 12567 0 41 41
Close 12557
Close 12558
Close 12559
Close 12560
Close 12562
Close 12550
Close 12551
Close 12554
Close 12555
Close 12552
Close 12553
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x2 12568
Close 12568
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 12569
QUERY_FILE_INFORMATION 12569
WriteX 12569 4095 1 1
QUERY_FILE_INFORMATION 12569
WriteX 12569 0 4096 4096
Close 12569
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 12570
ReadX 12570 0 41 41
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.FAM 0x40 0x1 -1
QUERY_FILE_INFORMATION 12567
ReadX 12567 0 4096 4096
WriteX 12570 0 4096 4096
Close 12570
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 12572
ReadX 12572 0 41 41
Close 12567
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__QB4.MB
Unlink \clients\client1\~dmtmp\PARADOX\__QB4.MB
Close 12572
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__QB5.MB
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x200000 0x1 12573
Close 12573
Rename \clients\client1\~dmtmp\PARADOX\__QB5.MB \clients\client1\~dmtmp\PARADOX\ANSWER.MB
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.MB 0x40 0x1 12574
ReadX 12574 0 41 41
Close 12574
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x2 12575
Close 12575
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12576
QUERY_FILE_INFORMATION 12576
WriteX 12576 2047 1 1
QUERY_FILE_INFORMATION 12576
WriteX 12576 0 2048 2048
Close 12576
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12577
ReadX 12577 0 511 511
ReadX 12577 0 572 572
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.MB 0x40 0x1 12578
ReadX 12578 0 41 41
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 12578
Close 12577
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\CLASSROL 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12579
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12579 0 511 511
ReadX 12579 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12580
ReadX 12580 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12581
ReadX 12581 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12582
ReadX 12582 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12583
ReadX 12583 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12584
ReadX 12584 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12585
ReadX 12585 0 53 53
ReadX 12585 53 2 2
ReadX 12585 55 2 2
ReadX 12585 57 184 184
ReadX 12585 241 298 298
Close 12585
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12586
ReadX 12586 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12587
ReadX 12587 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12588
ReadX 12588 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12589
ReadX 12589 0 511 511
ReadX 12588 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12590
ReadX 12590 0 53 53
ReadX 12590 53 2 2
ReadX 12590 55 480 480
ReadX 12590 535 2 2
Close 12590
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12591
ReadX 12591 0 41 41
ReadX 12579 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12592
ReadX 12592 0 53 53
ReadX 12592 53 2 2
ReadX 12592 55 480 480
ReadX 12592 535 2 2
Close 12592
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12593
ReadX 12593 0 53 53
ReadX 12593 53 2 2
ReadX 12593 55 2 2
ReadX 12593 57 184 184
ReadX 12593 241 298 298
Close 12593
ReadX 12586 2048 2048 2048
Close 12586
Close 12587
Close 12588
Close 12589
Close 12591
Close 12579
Close 12580
Close 12583
Close 12584
Close 12581
Close 12582
Close 12523
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 12594
QUERY_FILE_INFORMATION 12594
Close 12594
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Unlink \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Close 12549
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 12595
QUERY_FILE_INFORMATION 12595
Close 12595
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
Unlink \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12596
Close 12596
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12597
ReadX 12597 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12598
ReadX 12598 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12599
ReadX 12599 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12600
ReadX 12600 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12601
ReadX 12601 0 53 53
ReadX 12601 53 2 2
ReadX 12601 55 480 480
ReadX 12601 535 2 2
Close 12601
ReadX 12597 2048 2048 2048
Close 12597
Close 12598
Close 12599
Close 12600
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12602
ReadX 12602 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12603
ReadX 12603 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12604
ReadX 12604 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12605
ReadX 12605 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12606
ReadX 12606 0 53 53
ReadX 12606 53 2 2
ReadX 12606 55 480 480
ReadX 12606 535 2 2
Close 12606
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12607
ReadX 12607 0 511 511
ReadX 12607 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12608
ReadX 12608 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12609
ReadX 12609 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12610
ReadX 12610 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12611
ReadX 12611 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12612
ReadX 12612 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12613
ReadX 12613 0 41 41
ReadX 12607 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12614
ReadX 12614 0 53 53
ReadX 12614 53 2 2
ReadX 12614 55 2 2
ReadX 12614 57 184 184
ReadX 12614 241 298 298
Close 12614
ReadX 12602 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x2 12618
FIND_FIRST \clients\client1\~dmtmp\*
Close 12618
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 12619
QUERY_FILE_INFORMATION 12619
WriteX 12619 2047 1 1
QUERY_FILE_INFORMATION 12619
WriteX 12619 0 2048 2048
Close 12619
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 12620
ReadX 12620 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
Close 12620
Close 12613
Close 12607
Close 12608
Close 12611
Close 12612
Close 12609
Close 12610
Close 12602
Close 12603
Close 12604
Close 12605
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 12621
ReadX 12621 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12622
Close 12622
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12623
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12623 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12624
ReadX 12624 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12625
ReadX 12625 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12626
ReadX 12626 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12627
ReadX 12627 0 53 53
ReadX 12627 53 28 28
ReadX 12627 81 28 28
ReadX 12627 109 28 28
ReadX 12627 137 28 28
ReadX 12627 165 28 28
ReadX 12627 193 28 28
ReadX 12627 221 28 28
ReadX 12627 249 4 4
ReadX 12627 253 4 4
ReadX 12627 257 4 4
ReadX 12627 261 28 28
ReadX 12627 289 2 2
ReadX 12627 291 2 2
ReadX 12627 293 2 2
Close 12627
ReadX 12623 2048 2048 2048
Close 12623
Close 12624
Close 12625
Close 12626
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12628
ReadX 12628 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12629
ReadX 12629 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12630
ReadX 12630 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12631
ReadX 12631 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12632
ReadX 12632 0 53 53
ReadX 12632 53 28 28
ReadX 12632 81 28 28
ReadX 12632 109 28 28
ReadX 12632 137 28 28
ReadX 12632 165 28 28
ReadX 12632 193 28 28
ReadX 12632 221 28 28
ReadX 12632 249 4 4
ReadX 12632 253 4 4
ReadX 12632 257 4 4
ReadX 12632 261 28 28
ReadX 12632 289 2 2
ReadX 12632 291 2 2
ReadX 12632 293 2 2
Close 12632
ReadX 12628 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x2 12636
FIND_FIRST \clients\client1\~dmtmp\*
Close 12636
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 12637
QUERY_FILE_INFORMATION 12637
WriteX 12637 2047 1 1
QUERY_FILE_INFORMATION 12637
WriteX 12637 0 2048 2048
Close 12637
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 12638
ReadX 12638 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
Close 12638
Close 12628
Close 12629
Close 12630
Close 12631
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 12639
ReadX 12639 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12640
Close 12640
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12641
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12641 0 511 511
ReadX 12641 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12642
ReadX 12642 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12643
ReadX 12643 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12644
ReadX 12644 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12645
ReadX 12645 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12646
ReadX 12646 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12647
ReadX 12647 0 53 53
ReadX 12647 53 2 2
ReadX 12647 55 2 2
ReadX 12647 57 184 184
ReadX 12647 241 298 298
Close 12647
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12648
ReadX 12648 0 41 41
ReadX 12641 2048 2048 2048
Close 12648
Close 12641
Close 12642
Close 12645
Close 12646
Close 12643
Close 12644
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12649
ReadX 12649 0 511 511
ReadX 12649 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12650
ReadX 12650 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12651
ReadX 12651 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12652
ReadX 12652 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12653
ReadX 12653 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12654
ReadX 12654 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12655
ReadX 12655 0 53 53
ReadX 12655 53 2 2
ReadX 12655 55 2 2
ReadX 12655 57 184 184
ReadX 12655 241 298 298
Close 12655
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12656
ReadX 12656 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12657
ReadX 12657 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12658
ReadX 12658 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12659
ReadX 12659 0 511 511
ReadX 12658 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12660
ReadX 12660 0 53 53
ReadX 12660 53 2 2
ReadX 12660 55 480 480
ReadX 12660 535 2 2
Close 12660
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12661
ReadX 12661 0 41 41
ReadX 12649 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x2 12665
FIND_FIRST \clients\client1\~dmtmp\*
Close 12665
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 12666
QUERY_FILE_INFORMATION 12666
WriteX 12666 2047 1 1
QUERY_FILE_INFORMATION 12666
WriteX 12666 0 2048 2048
Close 12666
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 12667
ReadX 12667 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
Close 12667
Close 12656
Close 12657
Close 12658
Close 12659
Close 12661
Close 12649
Close 12650
Close 12653
Close 12654
Close 12651
Close 12652
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 12668
ReadX 12668 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
WriteX 12621 4095 1 1
QUERY_FILE_INFORMATION 12621
WriteX 12621 2048 2048 2048
QUERY_FILE_INFORMATION 12621
Flush 12621
WriteX 12621 0 88 88
WriteX 12639 4095 1 1
QUERY_FILE_INFORMATION 12639
WriteX 12639 2048 2048 2048
QUERY_FILE_INFORMATION 12639
Flush 12639
WriteX 12639 0 88 88
WriteX 12668 4095 1 1
QUERY_FILE_INFORMATION 12668
WriteX 12668 2048 2048 2048
QUERY_FILE_INFORMATION 12668
Flush 12668
WriteX 12668 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12669
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12669 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12670
ReadX 12670 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12671
ReadX 12671 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12672
ReadX 12672 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12673
ReadX 12673 0 53 53
ReadX 12673 53 2 2
ReadX 12673 55 480 480
ReadX 12673 535 2 2
Close 12673
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12674
ReadX 12674 0 511 511
ReadX 12674 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12675
ReadX 12675 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12676
ReadX 12676 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12677
ReadX 12677 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12678
ReadX 12678 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12679
ReadX 12679 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12680
ReadX 12680 0 41 41
ReadX 12674 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12681
ReadX 12681 0 53 53
ReadX 12681 53 2 2
ReadX 12681 55 2 2
ReadX 12681 57 184 184
ReadX 12681 241 298 298
Close 12681
ReadX 12669 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12682
ReadX 12682 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12683
ReadX 12683 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12684
ReadX 12684 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12685
ReadX 12685 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12686
ReadX 12686 0 53 53
ReadX 12686 53 28 28
ReadX 12686 81 28 28
ReadX 12686 109 28 28
ReadX 12686 137 28 28
ReadX 12686 165 28 28
ReadX 12686 193 28 28
ReadX 12686 221 28 28
ReadX 12686 249 4 4
ReadX 12686 253 4 4
ReadX 12686 257 4 4
ReadX 12686 261 28 28
ReadX 12686 289 2 2
ReadX 12686 291 2 2
ReadX 12686 293 2 2
Close 12686
ReadX 12682 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12687
ReadX 12687 0 53 53
ReadX 12687 53 2 2
ReadX 12687 55 2 2
ReadX 12687 57 184 184
ReadX 12687 241 298 298
Close 12687
ReadX 12671 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12688
ReadX 12688 0 53 53
ReadX 12688 53 2 2
ReadX 12688 55 480 480
ReadX 12688 535 2 2
Close 12688
ReadX 12682 4096 16384 16384
ReadX 12682 1280 16384 16384
ReadX 12682 2304 6144 6144
ReadX 12682 2688 2048 2048
ReadX 12669 4096 16384 16384
ReadX 12669 1280 16384 16384
ReadX 12669 2304 16384 16384
ReadX 12669 3328 16384 16384
ReadX 12669 272 16384 16384
ReadX 12669 336 16384 16384
ReadX 12669 400 16384 16384
ReadX 12669 464 16384 16384
ReadX 12669 528 16384 16384
ReadX 12669 592 16384 16384
ReadX 12669 656 16384 16384
ReadX 12669 720 16384 16384
ReadX 12669 784 16384 16384
ReadX 12669 848 16384 16384
ReadX 12669 912 16384 16384
ReadX 12675 2048 2048 2048
ReadX 12674 760 2048 2048
ReadX 12674 1144 2048 2048
ReadX 12674 408 2048 2048
ReadX 12674 912 2048 2048
ReadX 12674 1096 2048 2048
ReadX 12674 776 2048 2048
ReadX 12674 560 2048 2048
ReadX 12674 376 2048 2048
ReadX 12674 320 2048 2048
ReadX 12674 3072 2048 2048
ReadX 12674 784 2048 2048
ReadX 12674 2176 2048 2048
ReadX 12674 792 2048 2048
ReadX 12674 576 2048 2048
ReadX 12674 600 2048 2048
ReadX 12674 728 2048 2048
ReadX 12674 1112 2048 2048
ReadX 12674 664 2048 2048
ReadX 12674 976 2048 2048
ReadX 12674 3840 2048 2048
ReadX 12674 296 2048 2048
ReadX 12674 480 2048 2048
ReadX 12674 680 2048 2048
ReadX 12674 696 2048 2048
ReadX 12674 832 2048 2048
ReadX 12674 1016 2048 2048
ReadX 12674 1104 2048 2048
ReadX 12674 3200 2048 2048
ReadX 12674 264 2048 2048
ReadX 12674 448 2048 2048
ReadX 12674 648 2048 2048
ReadX 12674 1136 2048 2048
ReadX 12674 288 2048 2048
ReadX 12674 352 2048 2048
ReadX 12674 536 2048 2048
ReadX 12674 800 2048 2048
ReadX 12674 736 2048 2048
ReadX 12674 392 2048 2048
ReadX 12674 752 2048 2048
ReadX 12674 880 2048 2048
ReadX 12674 1064 2048 2048
ReadX 12674 1128 2048 2048
ReadX 12674 1536 2048 2048
ReadX 12674 2432 2048 2048
ReadX 12674 688 2048 2048
ReadX 12674 872 2048 2048
ReadX 12674 1072 2048 2048
ReadX 12674 984 2048 2048
ReadX 12674 704 2048 2048
ReadX 12674 3328 2048 2048
ReadX 12674 888 2048 2048
ReadX 12674 496 2048 2048
ReadX 12674 624 2048 2048
ReadX 12674 808 2048 2048
ReadX 12674 1008 2048 2048
ReadX 12674 1152 2048 2048
ReadX 12674 416 2048 2048
ReadX 12674 584 2048 2048
ReadX 12674 384 2048 2048
ReadX 12674 568 2048 2048
ReadX 12674 512 2048 2048
ReadX 12674 1408 2048 2048
ReadX 12674 472 2048 2048
ReadX 12674 672 2048 2048
ReadX 12674 2560 2048 2048
ReadX 12674 544 2048 2048
ReadX 12674 920 2048 2048
ReadX 12674 1120 2048 2048
ReadX 12674 2304 2048 2048
ReadX 12674 1080 2048 2048
ReadX 12674 1664 2048 2048
ReadX 12674 608 2048 2048
ReadX 12674 2688 2048 2048
ReadX 12674 3712 2048 2048
ReadX 12674 616 2048 2048
ReadX 12674 632 2048 2048
ReadX 12674 944 2048 2048
ReadX 12674 856 2048 2048
ReadX 12674 768 2048 2048
ReadX 12674 720 2048 2048
ReadX 12674 640 2048 2048
ReadX 12674 1048 2048 2048
ReadX 12674 1040 2048 2048
ReadX 12674 1032 2048 2048
ReadX 12674 1000 2048 2048
ReadX 12674 992 2048 2048
ReadX 12674 968 2048 2048
ReadX 12674 952 2048 2048
ReadX 12674 1056 2048 2048
ReadX 12674 816 2048 2048
ReadX 12674 864 2048 2048
ReadX 12674 2816 2048 2048
ReadX 12674 640 2048 2048
ReadX 12674 1024 2048 2048
ReadX 12674 504 2048 2048
ReadX 12674 424 2048 2048
ReadX 12674 840 2048 2048
ReadX 12674 896 2048 2048
ReadX 12674 520 2048 2048
ReadX 12674 960 2048 2048
ReadX 12674 552 2048 2048
ReadX 12674 488 2048 2048
ReadX 12674 824 2048 2048
ReadX 12674 304 2048 2048
ReadX 12674 768 2048 2048
ReadX 12674 712 2048 2048
ReadX 12674 512 2048 2048
ReadX 12674 432 2048 2048
ReadX 12674 384 2048 2048
ReadX 12674 2944 2048 2048
ReadX 12674 1088 2048 2048
ReadX 12674 928 2048 2048
ReadX 12674 280 2048 2048
ReadX 12674 744 2048 2048
ReadX 12674 3968 2048 2048
ReadX 12674 336 2048 2048
ReadX 12674 592 2048 2048
ReadX 12674 312 2048 2048
ReadX 12674 400 2048 2048
ReadX 12674 904 2048 2048
ReadX 12674 464 2048 2048
ReadX 12674 3456 2048 2048
ReadX 12674 848 2048 2048
ReadX 12674 936 2048 2048
ReadX 12674 656 2048 2048
ReadX 12674 344 2048 2048
ReadX 12674 440 2048 2048
ReadX 12674 4096 2048 2048
ReadX 12674 528 2048 2048
ReadX 12674 2048 2048 2048
ReadX 12674 1024 2048 2048
ReadX 12674 456 2048 2048
ReadX 12674 1792 2048 2048
ReadX 12674 1152 2048 2048
ReadX 12674 3584 2048 2048
ReadX 12674 1920 2048 2048
ReadX 12674 1280 2048 2048
ReadX 12674 896 2048 2048
ReadX 12674 328 2048 2048
Close 12682
Close 12683
Close 12684
Close 12685
Close 12680
Close 12674
Close 12675
Close 12678
Close 12679
Close 12676
Close 12677
Close 12669
Close 12670
Close 12671
Close 12672
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12689
FIND_FIRST \clients\client1\~dmtmp\*
Close 12689
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12690
QUERY_FILE_INFORMATION 12690
WriteX 12690 0 2048 2048
WriteX 12690 18431 1 1
QUERY_FILE_INFORMATION 12690
WriteX 12690 2048 16384 16384
WriteX 12690 1152 16384 16384
WriteX 12690 2176 16384 16384
WriteX 12690 3200 16384 16384
WriteX 12690 264 16384 16384
WriteX 12690 328 16384 16384
WriteX 12690 392 16384 16384
WriteX 12690 456 16384 16384
WriteX 12690 520 16384 16384
WriteX 12690 584 16384 16384
WriteX 12690 648 16384 16384
WriteX 12690 712 16384 16384
WriteX 12690 776 16384 16384
WriteX 12690 840 16384 16384
WriteX 12690 904 16384 16384
WriteX 12690 968 16384 16384
WriteX 12690 1032 16384 16384
WriteX 12690 1096 16384 16384
WriteX 12690 1160 16384 16384
WriteX 12690 1224 16384 16384
WriteX 12690 1288 16384 16384
WriteX 12690 1352 16384 16384
WriteX 12690 1416 16384 16384
WriteX 12690 1480 16384 16384
WriteX 12690 1544 16384 16384
WriteX 12690 1608 16384 16384
WriteX 12690 1672 16384 16384
WriteX 12690 1736 16384 16384
WriteX 12690 1800 16384 16384
WriteX 12690 1864 16384 16384
WriteX 12690 1928 16384 16384
WriteX 12690 1992 16384 16384
WriteX 12690 2056 16384 16384
WriteX 12690 2120 16384 16384
WriteX 12690 2184 16384 16384
WriteX 12690 2248 16384 16384
WriteX 12690 2312 16384 16384
WriteX 12690 2376 16384 16384
WriteX 12690 2440 16384 16384
WriteX 12690 0 88 88
Close 12690
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12691
ReadX 12691 0 511 511
ReadX 12691 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 12691
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\SCHED 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\SCHED 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12692
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12692 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12693
ReadX 12693 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12694
ReadX 12694 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12695
ReadX 12695 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12696
ReadX 12696 0 53 53
ReadX 12696 53 2 2
ReadX 12696 55 480 480
ReadX 12696 535 2 2
Close 12696
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12697
ReadX 12697 0 511 511
ReadX 12697 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12698
ReadX 12698 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12699
ReadX 12699 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12700
ReadX 12700 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12701
ReadX 12701 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12702
ReadX 12702 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12703
ReadX 12703 0 41 41
ReadX 12697 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12704
ReadX 12704 0 53 53
ReadX 12704 53 2 2
ReadX 12704 55 2 2
ReadX 12704 57 184 184
ReadX 12704 241 298 298
Close 12704
ReadX 12692 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12705
ReadX 12705 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12706
ReadX 12706 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12707
ReadX 12707 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12708
ReadX 12708 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12709
ReadX 12709 0 53 53
ReadX 12709 53 28 28
ReadX 12709 81 28 28
ReadX 12709 109 28 28
ReadX 12709 137 28 28
ReadX 12709 165 28 28
ReadX 12709 193 28 28
ReadX 12709 221 28 28
ReadX 12709 249 4 4
ReadX 12709 253 4 4
ReadX 12709 257 4 4
ReadX 12709 261 28 28
ReadX 12709 289 2 2
ReadX 12709 291 2 2
ReadX 12709 293 2 2
Close 12709
ReadX 12705 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12710
ReadX 12710 0 53 53
ReadX 12710 53 2 2
ReadX 12710 55 2 2
ReadX 12710 57 184 184
ReadX 12710 241 298 298
Close 12710
ReadX 12694 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12711
ReadX 12711 0 53 53
ReadX 12711 53 2 2
ReadX 12711 55 480 480
ReadX 12711 535 2 2
Close 12711
Close 12705
Close 12706
Close 12707
Close 12708
Close 12703
Close 12697
Close 12698
Close 12701
Close 12702
Close 12699
Close 12700
Close 12692
Close 12693
Close 12694
Close 12695
Close 12621
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 12712
QUERY_FILE_INFORMATION 12712
Close 12712
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
Unlink \clients\client1\~dmtmp\PARADOX\__42B96.DB
Close 12639
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 12713
QUERY_FILE_INFORMATION 12713
Close 12713
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
Unlink \clients\client1\~dmtmp\PARADOX\__43212.DB
Close 12668
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 12714
QUERY_FILE_INFORMATION 12714
Close 12714
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
Unlink \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12715
Close 12715
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12716
ReadX 12716 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12717
ReadX 12717 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12718
ReadX 12718 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12719
ReadX 12719 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12720
ReadX 12720 0 53 53
ReadX 12720 53 28 28
ReadX 12720 81 28 28
ReadX 12720 109 28 28
ReadX 12720 137 28 28
ReadX 12720 165 28 28
ReadX 12720 193 28 28
ReadX 12720 221 28 28
ReadX 12720 249 4 4
ReadX 12720 253 4 4
ReadX 12720 257 4 4
ReadX 12720 261 28 28
ReadX 12720 289 2 2
ReadX 12720 291 2 2
ReadX 12720 293 2 2
Close 12720
ReadX 12716 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
ReadX 12716 384 2048 2048
ReadX 12716 768 16384 16384
ReadX 12716 1792 14336 14336
ReadX 12719 2048 2048 2048
ReadX 12718 2048 2048 2048
WriteX 12716 1152 2048 2048
WriteX 12719 2048 2048 2048
WriteX 12718 2048 2048 2048
WriteX 12716 0 88 88
WriteX 12717 0 88 88
WriteX 12718 0 88 88
WriteX 12719 0 88 88
Close 12716
Close 12717
Close 12718
Close 12719
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12721
Close 12721
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12722
ReadX 12722 0 511 511
ReadX 12722 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12723
ReadX 12723 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12724
ReadX 12724 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12725
ReadX 12725 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12726
ReadX 12726 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12727
ReadX 12727 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12728
ReadX 12728 0 53 53
ReadX 12728 53 2 2
ReadX 12728 55 2 2
ReadX 12728 57 184 184
ReadX 12728 241 298 298
Close 12728
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12729
ReadX 12729 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12730
ReadX 12730 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12731
ReadX 12731 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12732
ReadX 12732 0 511 511
ReadX 12731 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12733
ReadX 12733 0 53 53
ReadX 12733 53 2 2
ReadX 12733 55 480 480
ReadX 12733 535 2 2
Close 12733
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12734
ReadX 12734 0 41 41
ReadX 12722 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.TV
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.TV 0x40 0x1 12735
QUERY_FILE_INFORMATION 12735
QUERY_FILE_INFORMATION 12735
ReadX 12735 0 8192 8192
Close 12735
ReadX 12722 1152 2048 2048
ReadX 12722 4096 16384 16384
Close 12729
Close 12730
Close 12731
Close 12732
Close 12734
Close 12722
Close 12723
Close 12726
Close 12727
Close 12724
Close 12725
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\PXTOOLS.FT 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 12736
Close 12736
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 12737
QUERY_FILE_INFORMATION 12737
ReadX 12737 0 64 64
ReadX 12737 144 64 64
ReadX 12737 224 156 156
ReadX 12737 1193 128 128
ReadX 12737 1201 128 128
ReadX 12737 1072 4 4
ReadX 12737 1076 1925 1925
ReadX 12737 758 4 4
ReadX 12737 762 4557 4557
ReadX 12737 1052 4 4
ReadX 12737 1056 314 314
ReadX 12737 1056 11056 11056
Close 12737
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12738
ReadX 12738 0 511 511
ReadX 12738 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12739
ReadX 12739 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12740
ReadX 12740 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12741
ReadX 12741 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12742
ReadX 12742 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12743
ReadX 12743 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12744
ReadX 12744 0 53 53
ReadX 12744 53 2 2
ReadX 12744 55 2 2
ReadX 12744 57 184 184
ReadX 12744 241 298 298
Close 12744
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12745
ReadX 12745 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12746
ReadX 12746 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12747
ReadX 12747 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12748
ReadX 12748 0 511 511
ReadX 12747 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12749
ReadX 12749 0 53 53
ReadX 12749 53 2 2
ReadX 12749 55 480 480
ReadX 12749 535 2 2
Close 12749
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12750
ReadX 12750 0 41 41
ReadX 12738 2048 2048 2048
ReadX 12739 2048 2048 2048
ReadX 12738 1144 2048 2048
ReadX 12738 1152 2048 2048
ReadX 12738 4096 16384 16384
WriteX 12738 2048 2048 2048
WriteX 12739 2048 2048 2048
WriteX 12738 0 88 88
WriteX 12739 0 88 88
Close 12745
Close 12746
Close 12747
Close 12748
Close 12750
Close 12738
Close 12739
Close 12742
Close 12743
Close 12740
Close 12741
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.FSL
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FSL 0x40 0x1 12751
Close 12751
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FSL 0x40 0x1 12752
QUERY_FILE_INFORMATION 12752
ReadX 12752 0 64 64
ReadX 12752 144 64 64
ReadX 12752 224 84 84
ReadX 12752 478 16 16
ReadX 12752 1056 6176 6176
Close 12752
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 12753
ReadX 12753 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 12754
ReadX 12754 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 12755
ReadX 12755 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 12756
ReadX 12756 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 12757
ReadX 12757 0 53 53
ReadX 12757 53 28 28
ReadX 12757 81 28 28
ReadX 12757 109 28 28
ReadX 12757 137 28 28
ReadX 12757 165 28 28
ReadX 12757 193 28 28
ReadX 12757 221 28 28
ReadX 12757 249 4 4
ReadX 12757 253 4 4
ReadX 12757 257 4 4
ReadX 12757 261 28 28
ReadX 12757 289 2 2
ReadX 12757 291 2 2
ReadX 12757 293 2 2
Close 12757
ReadX 12753 2048 2048 2048
ReadX 12754 2048 2048 2048
ReadX 12753 1280 2048 2048
ReadX 12756 2048 2048 2048
ReadX 12755 2048 2048 2048
WriteX 12753 1280 2048 2048
WriteX 12756 2048 2048 2048
WriteX 12755 2048 2048 2048
WriteX 12754 2048 2048 2048
WriteX 12753 0 88 88
WriteX 12754 0 88 88
WriteX 12755 0 88 88
WriteX 12756 0 88 88
WriteX 12753 1280 2048 2048
WriteX 12756 2048 2048 2048
WriteX 12755 2048 2048 2048
WriteX 12754 2048 2048 2048
WriteX 12753 0 88 88
WriteX 12754 0 88 88
WriteX 12755 0 88 88
WriteX 12756 0 88 88
WriteX 12753 1280 2048 2048
WriteX 12756 2048 2048 2048
WriteX 12755 2048 2048 2048
WriteX 12754 2048 2048 2048
WriteX 12753 0 88 88
WriteX 12754 0 88 88
WriteX 12755 0 88 88
WriteX 12756 0 88 88
Close 12753
Close 12754
Close 12755
Close 12756
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12758
ReadX 12758 0 511 511
ReadX 12758 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12759
ReadX 12759 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12760
ReadX 12760 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12761
ReadX 12761 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12762
ReadX 12762 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12763
ReadX 12763 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12764
ReadX 12764 0 53 53
ReadX 12764 53 2 2
ReadX 12764 55 2 2
ReadX 12764 57 184 184
ReadX 12764 241 298 298
Close 12764
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12765
ReadX 12765 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12766
ReadX 12766 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12767
ReadX 12767 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12768
ReadX 12768 0 511 511
ReadX 12767 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12769
ReadX 12769 0 53 53
ReadX 12769 53 2 2
ReadX 12769 55 480 480
ReadX 12769 535 2 2
Close 12769
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12770
ReadX 12770 0 41 41
ReadX 12758 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x2 12774
FIND_FIRST \clients\client1\~dmtmp\*
Close 12774
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 12775
QUERY_FILE_INFORMATION 12775
WriteX 12775 2047 1 1
QUERY_FILE_INFORMATION 12775
WriteX 12775 0 2048 2048
Close 12775
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 12776
ReadX 12776 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
WriteX 12776 4095 1 1
QUERY_FILE_INFORMATION 12776
WriteX 12776 2048 2048 2048
WriteX 12776 0 88 88
Close 12776
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 12777
ReadX 12777 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
ReadX 12777 2048 2048 2048
Close 12765
Close 12766
Close 12767
Close 12768
Close 12770
Close 12758
Close 12759
Close 12762
Close 12763
Close 12760
Close 12761
WriteX 12777 2048 2048 2048
WriteX 12777 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12778
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12778 0 511 511
ReadX 12778 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12779
ReadX 12779 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12780
ReadX 12780 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12781
ReadX 12781 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12782
ReadX 12782 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12783
ReadX 12783 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12784
ReadX 12784 0 53 53
ReadX 12784 53 2 2
ReadX 12784 55 2 2
ReadX 12784 57 184 184
ReadX 12784 241 298 298
Close 12784
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12785
ReadX 12785 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12786
ReadX 12786 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12787
ReadX 12787 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12788
ReadX 12788 0 511 511
ReadX 12787 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12789
ReadX 12789 0 53 53
ReadX 12789 53 2 2
ReadX 12789 55 480 480
ReadX 12789 535 2 2
Close 12789
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12790
ReadX 12790 0 41 41
ReadX 12778 2048 2048 2048
ReadX 12778 1152 2048 2048
ReadX 12778 4096 16384 16384
ReadX 12778 1280 16384 16384
ReadX 12778 2304 16384 16384
ReadX 12778 3328 16384 16384
ReadX 12778 272 16384 16384
ReadX 12778 336 16384 16384
ReadX 12778 400 16384 16384
ReadX 12778 464 16384 16384
ReadX 12778 528 16384 16384
ReadX 12778 592 16384 16384
ReadX 12778 656 16384 16384
ReadX 12778 720 16384 16384
ReadX 12778 784 16384 16384
ReadX 12778 848 16384 16384
ReadX 12778 912 16384 16384
ReadX 12778 976 16384 16384
ReadX 12778 1040 16384 16384
ReadX 12778 1104 12288 12288
Close 12785
Close 12786
Close 12787
Close 12788
Close 12790
Close 12778
Close 12779
Close 12782
Close 12783
Close 12780
Close 12781
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12791
FIND_FIRST \clients\client1\~dmtmp\*
Close 12791
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12792
QUERY_FILE_INFORMATION 12792
WriteX 12792 0 2048 2048
WriteX 12792 2048 4096 4096
WriteX 12792 0 88 88
Close 12792
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12793
ReadX 12793 0 511 511
ReadX 12793 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 12793
WriteX 12777 2048 2048 2048
WriteX 12777 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12794
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12794 0 511 511
ReadX 12794 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12795
ReadX 12795 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12796
ReadX 12796 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12797
ReadX 12797 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12798
ReadX 12798 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12799
ReadX 12799 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12800
ReadX 12800 0 53 53
ReadX 12800 53 2 2
ReadX 12800 55 2 2
ReadX 12800 57 184 184
ReadX 12800 241 298 298
Close 12800
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12801
ReadX 12801 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12802
ReadX 12802 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12803
ReadX 12803 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12804
ReadX 12804 0 511 511
ReadX 12803 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12805
ReadX 12805 0 53 53
ReadX 12805 53 2 2
ReadX 12805 55 480 480
ReadX 12805 535 2 2
Close 12805
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12806
ReadX 12806 0 41 41
ReadX 12794 2048 2048 2048
ReadX 12794 1152 2048 2048
ReadX 12794 4096 16384 16384
ReadX 12794 1280 16384 16384
ReadX 12794 2304 16384 16384
ReadX 12794 3328 16384 16384
ReadX 12794 272 16384 16384
ReadX 12794 336 16384 16384
ReadX 12794 400 16384 16384
ReadX 12794 464 16384 16384
ReadX 12794 528 16384 16384
ReadX 12794 592 16384 16384
ReadX 12794 656 16384 16384
ReadX 12794 720 16384 16384
ReadX 12794 784 16384 16384
ReadX 12794 848 16384 16384
ReadX 12794 912 16384 16384
ReadX 12794 976 16384 16384
ReadX 12794 1040 16384 16384
ReadX 12794 1104 12288 12288
Close 12801
Close 12802
Close 12803
Close 12804
Close 12806
Close 12794
Close 12795
Close 12798
Close 12799
Close 12796
Close 12797
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12807
FIND_FIRST \clients\client1\~dmtmp\*
Close 12807
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12808
QUERY_FILE_INFORMATION 12808
WriteX 12808 0 2048 2048
WriteX 12808 2048 4096 4096
WriteX 12808 0 88 88
Close 12808
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 12809
ReadX 12809 0 511 511
ReadX 12809 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 12809
Close 12777
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 12810
QUERY_FILE_INFORMATION 12810
Close 12810
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
Unlink \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 12811
Close 12811
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 12812
QUERY_FILE_INFORMATION 12812
ReadX 12812 0 64 64
ReadX 12812 144 64 64
ReadX 12812 224 156 156
ReadX 12812 1193 128 128
ReadX 12812 1201 128 128
ReadX 12812 1072 4 4
ReadX 12812 1076 1925 1925
ReadX 12812 758 4 4
ReadX 12812 762 4557 4557
ReadX 12812 1052 4 4
ReadX 12812 1056 314 314
ReadX 12812 1056 11056 11056
Close 12812
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12813
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12813 0 511 511
ReadX 12813 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12814
ReadX 12814 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12815
ReadX 12815 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12816
ReadX 12816 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12817
ReadX 12817 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12818
ReadX 12818 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12819
ReadX 12819 0 53 53
ReadX 12819 53 2 2
ReadX 12819 55 2 2
ReadX 12819 57 184 184
ReadX 12819 241 298 298
Close 12819
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12820
ReadX 12820 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12821
ReadX 12821 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12822
ReadX 12822 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12823
ReadX 12823 0 511 511
ReadX 12822 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12824
ReadX 12824 0 53 53
ReadX 12824 53 2 2
ReadX 12824 55 480 480
ReadX 12824 535 2 2
Close 12824
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12825
ReadX 12825 0 41 41
ReadX 12813 2048 2048 2048
ReadX 12813 1152 2048 2048
ReadX 12813 4096 16384 16384
Close 12820
Close 12821
Close 12822
Close 12823
Close 12825
Close 12813
Close 12814
Close 12817
Close 12818
Close 12815
Close 12816
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\QUENRD 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\QUENRD 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12826
ReadX 12826 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12827
ReadX 12827 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12828
ReadX 12828 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12829
ReadX 12829 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12830
ReadX 12830 0 53 53
ReadX 12830 53 2 2
ReadX 12830 55 480 480
ReadX 12830 535 2 2
Close 12830
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12831
ReadX 12831 0 511 511
ReadX 12831 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12832
ReadX 12832 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12833
ReadX 12833 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12834
ReadX 12834 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12835
ReadX 12835 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12836
ReadX 12836 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12837
ReadX 12837 0 41 41
ReadX 12831 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12838
ReadX 12838 0 53 53
ReadX 12838 53 2 2
ReadX 12838 55 2 2
ReadX 12838 57 184 184
ReadX 12838 241 298 298
Close 12838
ReadX 12826 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x2 12842
FIND_FIRST \clients\client1\~dmtmp\*
Close 12842
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 12843
QUERY_FILE_INFORMATION 12843
WriteX 12843 2047 1 1
QUERY_FILE_INFORMATION 12843
WriteX 12843 0 2048 2048
Close 12843
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 12844
ReadX 12844 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
WriteX 12844 4095 1 1
QUERY_FILE_INFORMATION 12844
WriteX 12844 2048 2048 2048
WriteX 12844 0 88 88
Close 12844
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 12845
ReadX 12845 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
ReadX 12845 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x2 12849
Close 12849
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 12850
QUERY_FILE_INFORMATION 12850
WriteX 12850 2047 1 1
QUERY_FILE_INFORMATION 12850
WriteX 12850 0 2048 2048
Close 12850
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 12851
ReadX 12851 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
WriteX 12851 4095 1 1
QUERY_FILE_INFORMATION 12851
WriteX 12851 2048 2048 2048
WriteX 12851 0 88 88
Close 12851
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 12852
ReadX 12852 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
ReadX 12852 2048 2048 2048
Close 12837
Close 12831
Close 12832
Close 12835
Close 12836
Close 12833
Close 12834
Close 12826
Close 12827
Close 12828
Close 12829
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 12853
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 12853 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 12854
ReadX 12854 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 12855
ReadX 12855 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 12856
ReadX 12856 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 12857
ReadX 12857 0 53 53
ReadX 12857 53 2 2
ReadX 12857 55 480 480
ReadX 12857 535 2 2
Close 12857
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 12858
ReadX 12858 0 511 511
ReadX 12858 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 12859
ReadX 12859 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 12860
ReadX 12860 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 12861
ReadX 12861 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 12862
ReadX 12862 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 12863
ReadX 12863 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 12864
ReadX 12864 0 41 41
ReadX 12858 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 12865
ReadX 12865 0 53 53
ReadX 12865 53 2 2
ReadX 12865 55 2 2
ReadX 12865 57 184 184
ReadX 12865 241 298 298
Close 12865
ReadX 12853 2048 2048 2048
ReadX 12853 384 16384 16384
ReadX 12853 1408 16384 16384
ReadX 12853 2560 16384 16384
ReadX 12853 3584 16384 16384
ReadX 12853 288 16384 16384
ReadX 12853 352 16384 16384
ReadX 12853 416 16384 16384
ReadX 12853 480 16384 16384
ReadX 12853 552 16384 16384
ReadX 12853 616 16384 16384
ReadX 12853 680 16384 16384
ReadX 12853 744 16384 16384
ReadX 12853 808 16384 16384
ReadX 12853 872 16384 16384
ReadX 12853 936 10240 10240
Close 12864
Close 12858
Close 12859
Close 12862
Close 12863
Close 12860
Close 12861
Close 12853
Close 12854
Close 12855
Close 12856
Close 12845
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 12866
QUERY_FILE_INFORMATION 12866
Close 12866
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
Unlink \clients\client1\~dmtmp\PARADOX\__52E2B.DB
Close 12852
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 12867
QUERY_FILE_INFORMATION 12867
Close 12867
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
Unlink \clients\client1\~dmtmp\PARADOX\__52EF7.DB
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 12868
ReadX 12868 0 65471 65471
ReadX 12868 65471 63 63
ReadX 12868 65534 65471 65471
ReadX 12868 131005 63 63
ReadX 12868 131068 65471 65471
ReadX 12868 196539 63 63
ReadX 12868 196602 65471 65471
ReadX 12868 262073 63 63
ReadX 12868 262136 65471 65471
ReadX 12868 327607 63 63
ReadX 12868 327670 10 10
Close 12868
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 12869
ReadX 12869 0 65471 65471
ReadX 12869 65471 63 63
ReadX 12869 65534 65471 65471
ReadX 12869 131005 63 63
ReadX 12869 131068 65471 65471
ReadX 12869 196539 63 63
ReadX 12869 196602 65471 65471
ReadX 12869 262073 63 63
ReadX 12869 262136 65471 65471
ReadX 12869 327607 63 63
ReadX 12869 327670 65471 65471
ReadX 12869 393141 63 63
ReadX 12869 393204 65471 65471
ReadX 12869 458675 63 63
ReadX 12869 458738 65471 65471
ReadX 12869 524209 63 63
ReadX 12869 524272 65471 65471
ReadX 12869 589743 63 63
ReadX 12869 589806 65471 65471
ReadX 12869 655277 63 63
ReadX 12869 655340 32 32
Close 12869
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 12870
ReadX 12870 0 65471 65471
ReadX 12870 65471 63 63
ReadX 12870 65534 65471 65471
ReadX 12870 131005 63 63
ReadX 12870 131068 65471 65471
ReadX 12870 196539 63 63
ReadX 12870 196602 65471 65471
ReadX 12870 262073 63 63
ReadX 12870 262136 65471 65471
ReadX 12870 327607 63 63
ReadX 12870 327670 65471 65471
ReadX 12870 393141 63 63
ReadX 12870 393204 65471 65471
ReadX 12870 458675 63 63
ReadX 12870 458738 65471 65471
ReadX 12870 524209 63 63
ReadX 12870 524272 65471 65471
ReadX 12870 589743 63 63
ReadX 12870 589806 65471 65471
ReadX 12870 655277 63 63
ReadX 12870 655340 65471 65471
ReadX 12870 720811 63 63
ReadX 12870 720874 65471 65471
ReadX 12870 786345 63 63
ReadX 12870 786408 65471 65471
ReadX 12870 851879 63 63
ReadX 12870 851942 65471 65471
ReadX 12870 917413 63 63
ReadX 12870 917476 65471 65471
ReadX 12870 982947 63 63
ReadX 12870 983010 65471 65471
ReadX 12870 1048481 63 63
ReadX 12870 1048544 65471 65471
ReadX 12870 1114015 63 63
ReadX 12870 1114078 65471 65471
ReadX 12870 1179549 63 63
ReadX 12870 1179612 65471 65471
ReadX 12870 1245083 63 63
ReadX 12870 1245146 65471 65471
ReadX 12870 1310617 63 63
ReadX 12870 1310680 65471 65471
ReadX 12870 1376151 63 63
ReadX 12870 1376214 65471 65471
ReadX 12870 1441685 63 63
ReadX 12870 1441748 65471 65471
ReadX 12870 1507219 63 63
ReadX 12870 1507282 65471 65471
ReadX 12870 1572753 63 63
ReadX 12870 1572816 65471 65471
ReadX 12870 1638287 63 63
ReadX 12870 1638350 65471 65471
ReadX 12870 1703821 63 63
ReadX 12870 1703884 65471 65471
ReadX 12870 1769355 63 63
ReadX 12870 1769418 65471 65471
ReadX 12870 1834889 63 63
ReadX 12870 1834952 32824 32824
Close 12870
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TEMPLATES 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\STARTUP 1
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\CHAP10 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\CHAP10.DOC 
NTCreateX \clients\client1\~dmtmp\WORD\CHAP10.DOC 0x40 0x1 12871
QUERY_FILE_INFORMATION 12871
ReadX 12871 0 512 512
ReadX 12871 512 512 512
ReadX 12871 1024 512 512
QUERY_FILE_INFORMATION 12871
QUERY_FILE_INFORMATION 12871
ReadX 12871 2560 2048 2048
ReadX 12871 1984 2048 2048
NTCreateX \clients\client1\~dmtmp\WORD\~$CHAP10.DOC 0x40 0x2 12872
WriteX 12872 52 1 1
QUERY_FILE_INFORMATION 12872
WriteX 12872 0 53 53
Close 12872
ReadX 12871 2208 650 650
ReadX 12871 1920 2048 2048
ReadX 12871 2112 2048 2048
ReadX 12871 1856 2048 2048
ReadX 12871 1824 2048 2048
ReadX 12871 1536 512 512
ReadX 12871 1632 1536 1536
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT 1
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x2 12873
Close 12873
Unlink \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
ReadX 12871 1568 512 512
ReadX 12871 1536 512 512
ReadX 12871 2176 384 384
ReadX 12871 1600 416 416
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x40 0x2 12874
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
ReadX 12871 288 2048 2048
ReadX 12871 2336 2048 2048
ReadX 12871 4384 2048 2048
ReadX 12871 6432 2048 2048
ReadX 12871 8480 2048 2048
ReadX 12871 10528 2048 2048
ReadX 12871 12576 2048 2048
WriteX 12874 15359 1 1
QUERY_FILE_INFORMATION 12874
ReadX 12871 14624 2048 2048
ReadX 12871 16672 2048 2048
ReadX 12871 18720 2048 2048
ReadX 12871 1728 2048 2048
WriteX 12874 0 15360 15360
Close 12874
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x40 0x1 12875
QUERY_FILE_INFORMATION 12875
ReadX 12875 0 512 512
ReadX 12875 2048 512 512
ReadX 12875 2560 512 512
QUERY_FILE_INFORMATION 12875
QUERY_FILE_INFORMATION 12875
QUERY_FILE_INFORMATION 12875
QUERY_FILE_INFORMATION 12875
QUERY_FILE_INFORMATION 12875
WriteX 12875 2152 384 384
QUERY_FILE_INFORMATION 12875
WriteX 12875 2150 22 22
WriteX 12875 2144 106 106
QUERY_FILE_INFORMATION 12875
WriteX 12875 2176 496 496
ReadX 12875 2176 496 496
QUERY_FILE_INFORMATION 12875
WriteX 12875 2440 384 384
QUERY_FILE_INFORMATION 12875
WriteX 12875 2152 384 384
WriteX 12875 2432 112 112
QUERY_FILE_INFORMATION 12875
WriteX 12875 2439 16 16
QUERY_FILE_INFORMATION 12875
WriteX 12875 2208 220 220
ReadX 12875 2208 220 220
QUERY_FILE_INFORMATION 12875
QUERY_FILE_INFORMATION 12875
WriteX 12875 2440 220 220
QUERY_FILE_INFORMATION 12875
WriteX 12875 2453 36 36
WriteX 12875 2080 512 512
WriteX 12875 2176 512 512
WriteX 12875 2112 512 512
WriteX 12875 2048 512 512
WriteX 12875 0 512 512
QUERY_FILE_INFORMATION 12871
QUERY_FILE_INFORMATION 12871
WriteX 12875 2080 512 512
Close 12875
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x200000 0x1 12876
Close 12876
Rename \clients\client1\~dmtmp\WORD\~WRD0000.TMP \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x1 12877
QUERY_FILE_INFORMATION 12877
ReadX 12877 0 512 512
ReadX 12877 2048 512 512
ReadX 12877 2560 512 512
QUERY_FILE_INFORMATION 12877
QUERY_FILE_INFORMATION 12877
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
NTCreateX \clients\client1\~dmtmp\WORD\~$CHAP10.DOC 0x40 0x1 12878
Close 12878
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
Unlink \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
Close 12871
ReadX 12877 1408 512 512
ReadX 12877 2048 512 512
ReadX 12877 1536 512 512
ReadX 12877 2560 512 512
ReadX 12877 3072 512 512
ReadX 12877 3584 512 512
ReadX 12877 4096 512 512
ReadX 12877 4608 512 512
ReadX 12877 5120 512 512
ReadX 12877 5632 512 512
ReadX 12877 6144 512 512
ReadX 12877 6656 512 512
ReadX 12877 7168 512 512
ReadX 12877 7680 512 512
ReadX 12877 8192 512 512
ReadX 12877 8704 512 512
ReadX 12877 9216 512 512
ReadX 12877 9728 512 512
ReadX 12877 10240 512 512
ReadX 12877 10752 512 512
ReadX 12877 11264 512 512
ReadX 12877 11776 512 512
ReadX 12877 12288 512 512
ReadX 12877 12800 512 512
ReadX 12877 13312 512 512
ReadX 12877 13824 512 512
ReadX 12877 14336 512 512
ReadX 12877 14848 512 512
ReadX 12877 15360 512 0
ReadX 12877 15360 512 0
ReadX 12877 15360 512 0
ReadX 12877 15360 512 0
ReadX 12877 15360 512 0
ReadX 12877 15360 512 0
ReadX 12877 15360 512 0
ReadX 12877 15360 512 0
ReadX 12877 15360 512 0
ReadX 12877 15360 512 0
ReadX 12877 2560 2048 2048
ReadX 12877 4608 2048 2048
ReadX 12877 6656 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\BASEMACH.DOC
NTCreateX \clients\client1\~dmtmp\WORD\BASEMACH.DOC 0x40 0x1 12879
QUERY_FILE_INFORMATION 12879
ReadX 12879 0 512 512
ReadX 12879 512 512 512
ReadX 12879 1024 512 512
QUERY_FILE_INFORMATION 12879
QUERY_FILE_INFORMATION 12879
ReadX 12879 352 2048 2048
ReadX 12879 608 1097 1097
ReadX 12879 576 1609 1609
ReadX 12879 4096 512 512
ReadX 12879 1536 512 512
ReadX 12879 3840 256 256
ReadX 12879 288 576 576
ReadX 12879 512 512 512
ReadX 12879 480 512 512
ReadX 12879 544 512 512
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\WORD\BASEMACH.DOC 0x40 0x1 12880
ReadX 12880 0 4096 4096
ReadX 12880 4096 4096 4096
ReadX 12880 8192 4096 4096
Close 12879
Close 12880
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\RESULTS.XLS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x40 0x2 12881
WriteX 12881 15359 1 1
QUERY_FILE_INFORMATION 12881
WriteX 12881 0 15360 15360
Close 12881
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x40 0x1 12882
QUERY_FILE_INFORMATION 12882
ReadX 12882 0 512 512
ReadX 12882 2048 512 512
ReadX 12882 2560 512 512
QUERY_FILE_INFORMATION 12882
QUERY_FILE_INFORMATION 12882
QUERY_FILE_INFORMATION 12882
QUERY_FILE_INFORMATION 12882
QUERY_FILE_INFORMATION 12882
WriteX 12882 2152 384 384
QUERY_FILE_INFORMATION 12882
WriteX 12882 2150 22 22
WriteX 12882 2144 106 106
QUERY_FILE_INFORMATION 12882
WriteX 12882 2176 476 476
ReadX 12882 2176 476 476
QUERY_FILE_INFORMATION 12882
WriteX 12882 2440 384 384
QUERY_FILE_INFORMATION 12882
WriteX 12882 2152 384 384
WriteX 12882 2432 92 92
QUERY_FILE_INFORMATION 12882
WriteX 12882 2437 36 36
QUERY_FILE_INFORMATION 12882
WriteX 12882 2208 220 220
ReadX 12882 2208 220 220
QUERY_FILE_INFORMATION 12882
QUERY_FILE_INFORMATION 12882
WriteX 12882 2440 220 220
QUERY_FILE_INFORMATION 12882
WriteX 12882 2453 36 36
WriteX 12882 2080 512 512
WriteX 12882 2176 512 512
WriteX 12882 2112 512 512
WriteX 12882 2048 512 512
WriteX 12882 0 512 512
QUERY_FILE_INFORMATION 12877
QUERY_FILE_INFORMATION 12877
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL0004.TMP 1
Close 12877
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x200000 0x1 12883
Close 12883
Rename \clients\client1\~dmtmp\WORD\HANDOUT.DOC \clients\client1\~dmtmp\WORD\~WRL0004.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL0004.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x40 0x1 12884
QUERY_FILE_INFORMATION 12884
ReadX 12884 0 512 512
ReadX 12884 2048 512 512
ReadX 12884 2560 512 512
QUERY_FILE_INFORMATION 12884
QUERY_FILE_INFORMATION 12884
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x200000 0x1 12885
Close 12885
WriteX 12882 2080 512 512
Close 12882
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x200000 0x1 12886
Close 12886
Rename \clients\client1\~dmtmp\WORD\~WRD0003.TMP \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x1 12887
QUERY_FILE_INFORMATION 12887
ReadX 12887 0 512 512
ReadX 12887 2048 512 512
ReadX 12887 2560 512 512
QUERY_FILE_INFORMATION 12887
QUERY_FILE_INFORMATION 12887
ReadX 12887 1312 512 512
ReadX 12887 1536 512 512
ReadX 12887 2048 512 512
ReadX 12887 576 512 512
ReadX 12887 1088 512 512
ReadX 12887 1056 512 512
ReadX 12887 1120 512 512
ReadX 12887 1184 512 512
ReadX 12887 2560 2048 2048
ReadX 12887 4608 2048 2048
ReadX 12887 6656 2048 2048
ReadX 12887 8704 2048 2048
ReadX 12887 10752 2048 2048
ReadX 12887 12800 2048 2048
ReadX 12887 14848 2048 512
ReadX 12887 15360 1536 0
ReadX 12887 1088 2048 2048
ReadX 12887 3136 2048 2048
ReadX 12887 1665 5835 5835
ReadX 12887 1856 2048 2048
ReadX 12887 2112 512 512
ReadX 12887 2152 384 384
ReadX 12887 2432 92 92
ReadX 12887 2176 512 512
ReadX 12887 2440 220 220
QUERY_FILE_INFORMATION 12887
QUERY_FILE_INFORMATION 12887
ReadX 12887 2432 512 512
WriteX 12887 2272 512 512
ReadX 12887 2144 512 512
WriteX 12887 2304 512 512
WriteX 12887 2272 92 92
WriteX 12887 2208 512 512
WriteX 12887 2720 512 512
WriteX 12887 0 512 512
QUERY_FILE_INFORMATION 12887
QUERY_FILE_INFORMATION 12887
ReadX 12887 1312 4096 4096
ReadX 12887 5408 4096 4096
ReadX 12887 9504 3305 3305
ReadX 12887 512 4096 4096
QUERY_FILE_INFORMATION 12887
QUERY_FILE_INFORMATION 12887
QUERY_FILE_INFORMATION 12887
WriteX 12887 3132 50 50
WriteX 12887 3182 4096 4096
WriteX 12887 7278 4096 4096
WriteX 12887 15469 1 1
QUERY_FILE_INFORMATION 12887
WriteX 12887 11374 4096 4096
WriteX 12887 15470 3584 3584
WriteX 12887 2144 512 512
WriteX 12887 2336 4096 4096
WriteX 12887 6432 4096 4096
WriteX 12887 10528 4096 4096
WriteX 12887 14624 462 462
WriteX 12887 2048 512 512
WriteX 12887 2560 512 512
WriteX 12887 0 512 512
QUERY_FILE_INFORMATION 12887
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FACTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FACTS.DOC  
NTCreateX \clients\client1\~dmtmp\WORD\FACTS.DOC 0x40 0x1 12888
QUERY_FILE_INFORMATION 12888
ReadX 12888 0 512 512
ReadX 12888 1152 512 512
ReadX 12888 1664 512 512
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
ReadX 12888 512 2048 2048
ReadX 12888 928 2048 2048
NTCreateX \clients\client1\~dmtmp\WORD\~$FACTS.DOC 0x40 0x2 12889
WriteX 12889 52 1 1
QUERY_FILE_INFORMATION 12889
WriteX 12889 0 53 53
Close 12889
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
ReadX 12888 1120 504 504
ReadX 12888 896 2048 2048
ReadX 12888 1056 1528 1528
ReadX 12888 864 2048 2048
ReadX 12888 832 2048 2048
ReadX 12888 736 2048 2048
ReadX 12888 1216 512 512
ReadX 12888 1256 384 384
ReadX 12888 1536 140 140
ReadX 12888 1280 512 512
ReadX 12888 1548 252 252
ReadX 12887 1184 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS 1
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x2 12890
Close 12890
Unlink \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC    1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC    1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP 11
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x40 0x2 12891
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC    1
ReadX 12888 2560 2048 2048
ReadX 12888 4608 2048 2048
ReadX 12888 6656 2048 2048
ReadX 12888 8704 2048 2048
ReadX 12888 10752 2048 2048
WriteX 12891 12005 1 1
QUERY_FILE_INFORMATION 12891
WriteX 12891 0 12006 12006
Close 12891
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x40 0x1 12892
QUERY_FILE_INFORMATION 12892
ReadX 12892 0 512 512
ReadX 12892 1152 512 512
ReadX 12892 1664 512 512
QUERY_FILE_INFORMATION 12892
QUERY_FILE_INFORMATION 12892
QUERY_FILE_INFORMATION 12892
QUERY_FILE_INFORMATION 12892
QUERY_FILE_INFORMATION 12892
QUERY_FILE_INFORMATION 12892
QUERY_FILE_INFORMATION 12892
WriteX 12892 1256 384 384
QUERY_FILE_INFORMATION 12892
WriteX 12892 1254 22 22
WriteX 12892 1248 106 106
QUERY_FILE_INFORMATION 12892
WriteX 12892 1280 508 508
ReadX 12892 1280 508 508
QUERY_FILE_INFORMATION 12892
WriteX 12892 1544 384 384
QUERY_FILE_INFORMATION 12892
WriteX 12892 1256 384 384
WriteX 12892 1536 124 124
QUERY_FILE_INFORMATION 12892
WriteX 12892 1543 4 4
QUERY_FILE_INFORMATION 12892
WriteX 12892 1312 252 252
ReadX 12892 1312 252 252
QUERY_FILE_INFORMATION 12892
QUERY_FILE_INFORMATION 12892
WriteX 12892 1544 252 252
QUERY_FILE_INFORMATION 12892
WriteX 12892 1559 4 4
WriteX 12892 1184 512 512
WriteX 12892 1280 512 512
WriteX 12892 1216 512 512
WriteX 12892 1152 512 512
WriteX 12892 0 512 512
QUERY_FILE_INFORMATION 12888
QUERY_FILE_INFORMATION 12888
WriteX 12892 1184 512 512
Close 12892
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x200000 0x1 12893
Close 12893
Rename \clients\client1\~dmtmp\WORD\~WRD3497.TMP \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x1 12894
QUERY_FILE_INFORMATION 12894
ReadX 12894 0 512 512
ReadX 12894 1152 512 512
ReadX 12894 1664 512 512
QUERY_FILE_INFORMATION 12894
QUERY_FILE_INFORMATION 12894
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\~$FACTS.DOC 0x40 0x1 12895
Close 12895
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
Unlink \clients\client1\~dmtmp\WORD\~$FACTS.DOC
Close 12888
ReadX 12894 736 512 512
ReadX 12894 1536 2048 2048
ReadX 12894 3584 2048 2048
ReadX 12894 5632 2048 2048
ReadX 12894 7680 2048 2048
ReadX 12894 9728 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x40 0x2 12896
WriteX 12896 11990 1 1
QUERY_FILE_INFORMATION 12896
WriteX 12896 0 11991 11991
Close 12896
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x40 0x1 12897
QUERY_FILE_INFORMATION 12897
ReadX 12897 0 512 512
ReadX 12897 1184 512 512
ReadX 12897 1696 512 512
QUERY_FILE_INFORMATION 12897
QUERY_FILE_INFORMATION 12897
QUERY_FILE_INFORMATION 12897
QUERY_FILE_INFORMATION 12897
QUERY_FILE_INFORMATION 12897
QUERY_FILE_INFORMATION 12897
QUERY_FILE_INFORMATION 12897
WriteX 12897 1288 384 384
QUERY_FILE_INFORMATION 12897
WriteX 12897 1286 22 22
WriteX 12897 1280 106 106
QUERY_FILE_INFORMATION 12897
WriteX 12897 1312 508 508
ReadX 12897 1312 508 508
QUERY_FILE_INFORMATION 12897
WriteX 12897 1576 384 384
QUERY_FILE_INFORMATION 12897
WriteX 12897 1288 384 384
WriteX 12897 1568 124 124
QUERY_FILE_INFORMATION 12897
WriteX 12897 1575 4 4
QUERY_FILE_INFORMATION 12897
WriteX 12897 1344 252 252
ReadX 12897 1344 252 252
QUERY_FILE_INFORMATION 12897
QUERY_FILE_INFORMATION 12897
WriteX 12897 1576 252 252
QUERY_FILE_INFORMATION 12897
WriteX 12897 1591 4 4
WriteX 12897 1216 512 512
WriteX 12897 1312 512 512
WriteX 12897 1248 512 512
WriteX 12897 1184 512 512
WriteX 12897 0 512 512
QUERY_FILE_INFORMATION 12894
QUERY_FILE_INFORMATION 12894
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL1146.TMP 1
Close 12894
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x200000 0x1 12898
Close 12898
Rename \clients\client1\~dmtmp\WORD\TIPS.DOC \clients\client1\~dmtmp\WORD\~WRL1146.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL1146.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x40 0x1 12899
QUERY_FILE_INFORMATION 12899
ReadX 12899 0 512 512
ReadX 12899 1152 512 512
ReadX 12899 1664 512 512
QUERY_FILE_INFORMATION 12899
QUERY_FILE_INFORMATION 12899
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x200000 0x1 12900
Close 12900
WriteX 12897 1216 512 512
Close 12897
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x200000 0x1 12901
Close 12901
Rename \clients\client1\~dmtmp\WORD\~WRD1119.TMP \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x1 12902
QUERY_FILE_INFORMATION 12902
ReadX 12902 0 512 512
ReadX 12902 1184 512 512
ReadX 12902 1696 512 512
QUERY_FILE_INFORMATION 12902
QUERY_FILE_INFORMATION 12902
ReadX 12902 1536 512 512
ReadX 12902 736 512 512
ReadX 12902 2048 512 512
ReadX 12902 2560 512 512
ReadX 12902 3072 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS 1
NTCreateX \clients\client1\~dmtmp\WORD\FSA4230.TMP 0x40 0x2 12903
Close 12903
Unlink \clients\client1\~dmtmp\WORD\FSA4230.TMP
ReadX 12902 914 3899 3899
ReadX 12902 1248 512 512
ReadX 12902 1288 384 384
ReadX 12902 1568 124 124
ReadX 12902 1312 512 512
ReadX 12902 1576 252 252
QUERY_FILE_INFORMATION 12902
QUERY_FILE_INFORMATION 12902
ReadX 12902 1568 512 512
WriteX 12902 1408 512 512
ReadX 12902 1280 512 512
WriteX 12902 1440 512 512
WriteX 12902 1408 124 124
WriteX 12902 1344 512 512
WriteX 12902 1856 512 512
WriteX 12902 0 512 512
QUERY_FILE_INFORMATION 12902
QUERY_FILE_INFORMATION 12902
ReadX 12902 544 4096 4096
ReadX 12902 4640 4096 4096
ReadX 12902 8736 1637 1637
ReadX 12902 512 4096 4096
QUERY_FILE_INFORMATION 12902
QUERY_FILE_INFORMATION 12902
WriteX 12902 1280 512 512
WriteX 12902 1472 3584 3584
WriteX 12902 5056 4096 4096
WriteX 12902 13247 1 1
QUERY_FILE_INFORMATION 12902
WriteX 12902 9152 4096 4096
WriteX 12902 13248 1736 1736
WriteX 12902 1184 512 512
WriteX 12902 1696 512 512
WriteX 12902 0 512 512
QUERY_FILE_INFORMATION 12902
ReadX 12902 1632 1024 1024
ReadX 12902 288 1024 1024
ReadX 12902 1312 2048 2048
ReadX 12902 3360 1024 1024
ReadX 12902 1696 1024 1024
ReadX 12902 2720 512 512
ReadX 12902 3232 512 512
ReadX 12902 3744 512 512
ReadX 12902 4256 512 512
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
ReadX 12902 2066 3998 3998
ReadX 12902 1448 384 384
ReadX 12902 1408 124 124
ReadX 12902 1416 252 252
QUERY_FILE_INFORMATION 12902
QUERY_FILE_INFORMATION 12902
ReadX 12902 1408 512 512
WriteX 12902 1536 512 512
ReadX 12902 1440 512 512
WriteX 12902 2048 512 512
WriteX 12902 1536 124 124
WriteX 12902 512 512 512
WriteX 12902 1024 512 512
WriteX 12902 0 512 512
QUERY_FILE_INFORMATION 12902
ReadX 12902 1696 4096 4096
ReadX 12902 5792 4096 4096
ReadX 12902 9888 1736 1736
ReadX 12902 1280 512 512
ReadX 12902 1472 3584 3584
QUERY_FILE_INFORMATION 12902
QUERY_FILE_INFORMATION 12902
WriteX 12902 3940 156 156
WriteX 12902 4096 512 512
WriteX 12902 544 3584 3584
WriteX 12902 4128 4096 4096
WriteX 12902 8224 3584 3584
WriteX 12902 1344 512 512
WriteX 12902 1856 1536 1536
WriteX 12902 2336 512 512
WriteX 12902 3584 356 356
WriteX 12902 2560 512 512
WriteX 12902 3072 512 512
WriteX 12902 0 512 512
QUERY_FILE_INFORMATION 12902
Close 12884
Close 12887
Close 12902
Close 12899
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x40 0x1 12904
Close 12904
Unlink \clients\client1\~dmtmp\WORD\~WRL0004.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x40 0x1 12905
Close 12905
Unlink \clients\client1\~dmtmp\WORD\~WRL1146.TMP
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 12906
WriteX 12906 0 65471 65471
WriteX 12906 65471 63 63
WriteX 12906 65534 65471 65471
WriteX 12906 131005 63 63
Close 12906
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 12907
WriteX 12907 0 65471 65471
WriteX 12907 65471 63 63
WriteX 12907 65534 65471 65471
WriteX 12907 131005 63 63
WriteX 12907 131068 65471 65471
WriteX 12907 196539 63 63
WriteX 12907 196602 65471 65471
WriteX 12907 262073 63 63
Close 12907
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 12908
WriteX 12908 0 65471 65471
WriteX 12908 65471 63 63
WriteX 12908 65534 65471 65471
WriteX 12908 131005 63 63
WriteX 12908 131068 65471 65471
WriteX 12908 196539 63 63
WriteX 12908 196602 65471 65471
WriteX 12908 262073 63 63
WriteX 12908 262136 65471 65471
WriteX 12908 327607 63 63
WriteX 12908 327670 65471 65471
WriteX 12908 393141 63 63
WriteX 12908 393204 65471 65471
WriteX 12908 458675 63 63
WriteX 12908 458738 65471 65471
WriteX 12908 524209 63 63
Close 12908
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER.MDB
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.MDB 0x40 0x1 12909
QUERY_FILE_INFORMATION 12909
QUERY_FILE_INFORMATION 12909
ReadX 12909 0 16384 16384
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.LDB 0x40 0x2 12910
Close 12910
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.LDB 0x40 0x1 12911
WriteX 12911 63 1 1
QUERY_FILE_INFORMATION 12911
WriteX 12911 0 64 64
ReadX 12909 992 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 344 2048 2048
ReadX 12909 1344 2048 2048
ReadX 12909 1352 2048 2048
ReadX 12909 1320 2048 2048
ReadX 12909 1360 2048 2048
ReadX 12909 1344 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1376 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2304 2048 2048
ReadX 12909 1472 2048 2048
ReadX 12909 0 2048 2048
ReadX 12909 1480 2048 2048
ReadX 12909 1488 2048 2048
ReadX 12909 1496 2048 2048
ReadX 12909 0 2048 2048
ReadX 12909 1504 2048 2048
ReadX 12909 1464 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 1000 2048 2048
ReadX 12909 1416 2048 2048
ReadX 12909 1000 2048 2048
QUERY_FS_INFORMATION 259
ReadX 12909 360 2048 2048
ReadX 12909 368 2048 2048
ReadX 12909 360 2048 2048
ReadX 12909 376 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 1232 2048 2048
ReadX 12909 2432 6144 6144
ReadX 12909 2376 2048 2048
ReadX 12909 2360 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 2376 2048 2048
ReadX 12909 2384 2048 2048
ReadX 12909 2368 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 1296 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 2392 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
ReadX 12909 0 2048 2048
ReadX 12909 2688 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 2688 2048 2048
WriteX 12909 2688 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 0 2048 2048
ReadX 12909 2688 2048 2048
ReadX 12909 2688 2048 2048
ReadX 12909 2688 2048 2048
WriteX 12909 2688 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 0 2048 2048
ReadX 12909 2688 2048 2048
QUERY_FS_INFORMATION 259
ReadX 12909 2688 2048 2048
ReadX 12909 2688 2048 2048
WriteX 12909 2688 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 320 4096 4096
ReadX 12909 0 2048 2048
ReadX 12909 3584 2048 2048
ReadX 12909 3584 2048 2048
ReadX 12909 3584 2048 2048
ReadX 12909 0 2048 2048
WriteX 12909 3584 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2688 2048 2048
ReadX 12909 0 2048 2048
ReadX 12909 2688 2048 2048
ReadX 12909 2688 2048 2048
WriteX 12909 2688 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 0 2048 2048
ReadX 12909 3200 2048 2048
ReadX 12909 3200 2048 2048
ReadX 12909 3200 2048 2048
WriteX 12909 3200 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 0 2048 2048
ReadX 12909 3456 2048 2048
ReadX 12909 3456 2048 2048
ReadX 12909 3456 2048 2048
WriteX 12909 3456 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2496 2048 2048
ReadX 12909 2472 2048 2048
ReadX 12909 2456 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 2472 2048 2048
ReadX 12909 2480 2048 2048
ReadX 12909 2464 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 2488 2048 2048
ReadX 12909 2568 8192 8192
ReadX 12909 1000 2048 2048
ReadX 12909 328 2048 2048
ReadX 12909 3840 2048 2048
ReadX 12909 2048 2048 2048
ReadX 12909 2560 2048 2048
ReadX 12909 920 2048 2048
WriteX 12909 2048 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 312 2048 2048
WriteX 12909 336 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 328 2048 2048
WriteX 12909 2560 2048 2048
WriteX 12909 3840 2048 2048
WriteX 12909 920 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2432 2048 2048
WriteX 12909 2432 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2456 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 0 2048 2048
ReadX 12909 328 2048 2048
ReadX 12909 2560 2048 2048
ReadX 12909 2048 2048 2048
ReadX 12909 3840 2048 2048
ReadX 12909 336 2048 2048
ReadX 12909 920 2048 2048
WriteX 12909 1536 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 2048 2048 2048
WriteX 12909 2560 2048 2048
WriteX 12909 336 2048 2048
WriteX 12909 920 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2048 2048 2048
ReadX 12909 2432 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 2048 2048 2048
WriteX 12909 2432 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2456 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1536 2048 2048
ReadX 12909 3840 2048 2048
ReadX 12909 336 2048 2048
ReadX 12909 920 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 1536 2048 2048
WriteX 12909 336 2048 2048
WriteX 12909 920 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2432 2048 2048
WriteX 12909 2432 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2456 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1536 2048 2048
ReadX 12909 3840 2048 2048
ReadX 12909 336 2048 2048
ReadX 12909 920 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 1536 2048 2048
WriteX 12909 336 2048 2048
WriteX 12909 920 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2432 2048 2048
WriteX 12909 2432 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2456 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1536 2048 2048
ReadX 12909 3840 2048 2048
ReadX 12909 336 2048 2048
ReadX 12909 920 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 1536 2048 2048
WriteX 12909 336 2048 2048
WriteX 12909 920 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2432 2048 2048
WriteX 12909 2432 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2456 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1536 2048 2048
ReadX 12909 3840 2048 2048
ReadX 12909 336 2048 2048
ReadX 12909 920 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 1536 2048 2048
WriteX 12909 336 2048 2048
WriteX 12909 920 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2432 2048 2048
WriteX 12909 2432 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 0 2048 2048
Flush 12909
ReadX 12909 2456 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1536 2048 2048
ReadX 12909 3840 2048 2048
ReadX 12909 336 2048 2048
ReadX 12909 920 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 1536 2048 2048
WriteX 12909 336 2048 2048
WriteX 12909 920 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2432 2048 2048
WriteX 12909 2432 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2624 6144 6144
ReadX 12909 2616 2048 2048
ReadX 12909 2688 2048 2048
ReadX 12909 2600 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 2616 2048 2048
ReadX 12909 2608 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 344 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 520 2048 2048
ReadX 12909 1392 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 400 2048 2048
ReadX 12909 528 2048 2048
ReadX 12909 536 2048 2048
ReadX 12909 824 2048 2048
ReadX 12909 832 2048 2048
ReadX 12909 384 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 408 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 528 2048 2048
ReadX 12909 552 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 824 2048 2048
ReadX 12909 840 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 768 2048 2048
ReadX 12909 2048 2048 2048
WriteX 12909 1415 1 1
WriteX 12909 352 2048 2048
WriteX 12909 1112 2048 2048
WriteX 12909 1400 2048 2048
WriteX 12909 1408 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 2048 2048 2048
WriteX 12909 768 2048 2048
WriteX 12909 344 2048 2048
WriteX 12909 1000 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 416 2048 2048
ReadX 12909 424 2048 2048
ReadX 12909 432 2048 2048
ReadX 12909 440 2048 2048
ReadX 12909 576 16384 16384
ReadX 12909 448 2048 2048
ReadX 12909 456 2048 2048
ReadX 12909 464 2048 2048
ReadX 12909 640 16384 16384
ReadX 12909 704 16384 16384
ReadX 12909 768 10240 10240
QUERY_FS_INFORMATION 259
ReadX 12909 848 2048 2048
ReadX 12909 560 2048 2048
ReadX 12909 808 2048 2048
QUERY_FS_INFORMATION 259
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 2600 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 352 2048 2048
ReadX 12909 1928 8192 8192
ReadX 12909 528 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 824 2048 2048
ReadX 12909 0 2048 2048
Flush 12909
ReadX 12909 2600 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 352 2048 2048
ReadX 12909 528 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 824 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 856 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 0 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 392 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 392 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 472 2048 2048
ReadX 12909 480 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 488 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 928 2048 2048
ReadX 12909 936 2048 2048
ReadX 12909 976 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 392 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 392 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 952 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 0 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 528 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 528 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 816 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 1384 2048 2048
QUERY_FS_INFORMATION 259
ReadX 12909 1336 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 528 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 528 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 0 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1240 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2200 4096 4096
ReadX 12909 2152 2048 2048
ReadX 12909 2160 2048 2048
ReadX 12909 528 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 1312 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 1928 2048 2048
ReadX 12909 528 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 824 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1416 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 352 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 528 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 824 2048 2048
ReadX 12909 384 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 528 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 824 2048 2048
QUERY_FS_INFORMATION 259
ReadX 12909 352 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 768 2048 2048
ReadX 12909 2048 2048 2048
ReadX 12909 352 2048 2048
WriteX 12909 1551 1 1
WriteX 12909 1512 2048 2048
WriteX 12909 1520 2048 2048
WriteX 12909 1528 2048 2048
WriteX 12909 1544 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 2048 2048 2048
WriteX 12909 768 2048 2048
WriteX 12909 344 2048 2048
WriteX 12909 1000 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2048 2048 2048
WriteX 12909 2048 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 1000 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 1240 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 344 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 384 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 768 2048 2048
WriteX 12909 1567 1 1
WriteX 12909 1552 2048 2048
WriteX 12909 1560 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 768 2048 2048
WriteX 12909 344 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 1328 2048 2048
ReadX 12909 0 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 1240 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2200 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 1240 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 344 2048 2048
ReadX 12909 384 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 2048 2048 2048
ReadX 12909 768 2048 2048
WriteX 12909 1583 1 1
WriteX 12909 1568 2048 2048
WriteX 12909 1576 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 2048 2048 2048
WriteX 12909 768 2048 2048
WriteX 12909 344 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 864 2048 2048
ReadX 12909 872 2048 2048
ReadX 12909 912 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 2688 2048 2048
ReadX 12909 1000 2048 2048
WriteX 12909 2688 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 0 2048 2048
ReadX 12909 2944 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 0 2048 2048
Flush 12909
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 2688 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 2688 2048 2048
WriteX 12909 2688 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 392 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 392 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 416 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 416 2048 2048
ReadX 12909 864 2048 2048
ReadX 12909 872 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 3840 2048 2048
ReadX 12909 312 2048 2048
ReadX 12909 888 2048 2048
ReadX 12909 400 2048 2048
ReadX 12909 896 2048 2048
WriteX 12909 1584 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 400 2048 2048
WriteX 12909 416 2048 2048
WriteX 12909 864 2048 2048
WriteX 12909 872 2048 2048
WriteX 12909 888 2048 2048
WriteX 12909 896 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 0 2048 2048
ReadX 12909 584 2048 2048
ReadX 12909 392 2048 2048
WriteX 12909 392 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 1328 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 392 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 0 2048 2048
ReadX 12909 408 2048 2048
ReadX 12909 1328 2048 2048
ReadX 12909 864 2048 2048
ReadX 12909 912 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 3840 2048 2048
ReadX 12909 312 2048 2048
ReadX 12909 1584 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 408 2048 2048
WriteX 12909 912 2048 2048
WriteX 12909 1584 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 0 2048 2048
ReadX 12909 408 2048 2048
ReadX 12909 392 2048 2048
WriteX 12909 392 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 528 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 528 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 552 2048 2048
ReadX 12909 1336 2048 2048
WriteX 12909 552 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 0 2048 2048
ReadX 12909 552 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 2664 2048 2048
ReadX 12909 2648 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 2672 2048 2048
ReadX 12909 2656 2048 2048
ReadX 12909 528 2048 2048
ReadX 12909 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 12909 528 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 1336 2048 2048
ReadX 12909 2680 2048 2048
ReadX 12909 2760 8192 8192
ReadX 12909 544 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 568 2048 2048
ReadX 12909 544 2048 2048
ReadX 12909 0 2048 2048
Flush 12909
ReadX 12909 2816 6144 6144
ReadX 12909 2760 2048 2048
ReadX 12909 2744 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 2752 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 528 2048 2048
ReadX 12909 528 2048 2048
ReadX 12909 1384 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\INV.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x2 12913
Close 12913
Unlink \clients\client1\~dmtmp\ACCESS\INV.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x2 12915
WriteX 12915 4065 1 1
QUERY_FILE_INFORMATION 12915
WriteX 12915 0 62591 62591
Close 12915
ReadX 12909 0 2048 2048
ReadX 12909 2808 2048 2048
ReadX 12909 2792 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 2800 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 384 2048 2048
ReadX 12909 392 2048 2048
ReadX 12909 1384 2048 2048
ReadX 12909 2432 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\SALES.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x2 12917
Close 12917
Unlink \clients\client1\~dmtmp\ACCESS\SALES.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x2 12919
WriteX 12919 4094 1 1
QUERY_FILE_INFORMATION 12919
WriteX 12919 0 10845 10845
Close 12919
ReadX 12909 1432 2048 2048
ReadX 12909 1304 2048 2048
ReadX 12909 1368 2048 2048
ReadX 12909 2304 2048 2048
ReadX 12909 1440 2048 2048
ReadX 12909 1424 2048 2048
ReadX 12909 1448 2048 2048
ReadX 12909 1456 2048 2048
ReadX 12909 2432 2048 2048
ReadX 12909 1384 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\LABELS.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x2 12921
Close 12921
Unlink \clients\client1\~dmtmp\ACCESS\LABELS.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x2 12923
ReadX 12909 0 2048 2048
WriteX 12923 4081 1 1
QUERY_FILE_INFORMATION 12923
WriteX 12923 0 30118 30118
Close 12923
ReadX 12909 1344 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 1152 2048 2048
ReadX 12909 1152 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 1000 2048 2048
ReadX 12909 768 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 344 2048 2048
WriteX 12909 1000 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 1416 2048 2048
ReadX 12909 1416 2048 2048
ReadX 12909 344 2048 2048
ReadX 12909 896 2048 2048
WriteX 12909 1538 2 2
WriteX 12909 344 2048 2048
WriteX 12909 1416 2048 2048
WriteX 12909 1538 2 2
ReadX 12909 2048 2048 2048
WriteX 12909 2048 2048 2048
WriteX 12909 1538 2 2
Close 12909
Close 12911
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER.LDB
Unlink \clients\client1\~dmtmp\ACCESS\FASTENER.LDB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 12924
ReadX 12924 0 65471 65471
ReadX 12924 65471 63 63
ReadX 12924 65534 65471 65471
ReadX 12924 131005 63 63
ReadX 12924 131068 65471 65471
ReadX 12924 196539 63 63
ReadX 12924 196602 65471 65471
ReadX 12924 262073 63 63
ReadX 12924 262136 65471 65471
ReadX 12924 327607 63 63
ReadX 12924 327670 10 10
Close 12924
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 12925
ReadX 12925 0 65471 65471
ReadX 12925 65471 63 63
ReadX 12925 65534 65471 65471
ReadX 12925 131005 63 63
ReadX 12925 131068 65471 65471
ReadX 12925 196539 63 63
ReadX 12925 196602 65471 65471
ReadX 12925 262073 63 63
ReadX 12925 262136 65471 65471
ReadX 12925 327607 63 63
ReadX 12925 327670 65471 65471
ReadX 12925 393141 63 63
ReadX 12925 393204 65471 65471
ReadX 12925 458675 63 63
ReadX 12925 458738 65471 65471
ReadX 12925 524209 63 63
ReadX 12925 524272 65471 65471
ReadX 12925 589743 63 63
ReadX 12925 589806 65471 65471
ReadX 12925 655277 63 63
ReadX 12925 655340 32 32
Close 12925
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 12926
ReadX 12926 0 65471 65471
ReadX 12926 65471 63 63
ReadX 12926 65534 65471 65471
ReadX 12926 131005 63 63
ReadX 12926 131068 65471 65471
ReadX 12926 196539 63 63
ReadX 12926 196602 65471 65471
ReadX 12926 262073 63 63
ReadX 12926 262136 65471 65471
ReadX 12926 327607 63 63
ReadX 12926 327670 65471 65471
ReadX 12926 393141 63 63
ReadX 12926 393204 65471 65471
ReadX 12926 458675 63 63
ReadX 12926 458738 65471 65471
ReadX 12926 524209 63 63
ReadX 12926 524272 65471 65471
ReadX 12926 589743 63 63
ReadX 12926 589806 65471 65471
ReadX 12926 655277 63 63
ReadX 12926 655340 65471 65471
ReadX 12926 720811 63 63
ReadX 12926 720874 65471 65471
ReadX 12926 786345 63 63
ReadX 12926 786408 65471 65471
ReadX 12926 851879 63 63
ReadX 12926 851942 65471 65471
ReadX 12926 917413 63 63
ReadX 12926 917476 65471 65471
ReadX 12926 982947 63 63
ReadX 12926 983010 65471 65471
ReadX 12926 1048481 63 63
ReadX 12926 1048544 65471 65471
ReadX 12926 1114015 63 63
ReadX 12926 1114078 65471 65471
ReadX 12926 1179549 63 63
ReadX 12926 1179612 65471 65471
ReadX 12926 1245083 63 63
ReadX 12926 1245146 65471 65471
ReadX 12926 1310617 63 63
ReadX 12926 1310680 65471 65471
ReadX 12926 1376151 63 63
ReadX 12926 1376214 65471 65471
ReadX 12926 1441685 63 63
ReadX 12926 1441748 65471 65471
ReadX 12926 1507219 63 63
ReadX 12926 1507282 65471 65471
ReadX 12926 1572753 63 63
ReadX 12926 1572816 65471 65471
ReadX 12926 1638287 63 63
ReadX 12926 1638350 65471 65471
ReadX 12926 1703821 63 63
ReadX 12926 1703884 65471 65471
ReadX 12926 1769355 63 63
ReadX 12926 1769418 65471 65471
ReadX 12926 1834889 63 63
ReadX 12926 1834952 32824 32824
Close 12926
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\PCBENCHM 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12927
Close 12927
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12928
ReadX 12928 0 24 24
Close 12928
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12929
QUERY_FILE_INFORMATION 12929
ReadX 12929 0 512 512
ReadX 12929 464 512 512
ReadX 12929 498 512 512
ReadX 12929 472 512 512
ReadX 12929 466 512 512
ReadX 12929 978 512 512
ReadX 12929 497 57 57
Close 12929
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12930
QUERY_FILE_INFORMATION 12930
ReadX 12930 0 512 512
ReadX 12930 464 512 512
ReadX 12930 498 512 512
ReadX 12930 472 512 512
ReadX 12930 462 512 512
ReadX 12930 468 512 512
ReadX 12930 466 512 512
QUERY_FILE_INFORMATION 12930
WriteX 12930 482 60 60
WriteX 12930 482 4 4
QUERY_FILE_INFORMATION 12930
WriteX 12930 482 11 11
ReadX 12930 497 57 57
ReadX 12930 497 57 57
ReadX 12930 368 4096 4096
ReadX 12930 460 512 512
ReadX 12930 512 4096 4096
ReadX 12930 4608 4096 4096
ReadX 12930 8704 4096 4096
ReadX 12930 12800 4096 4096
ReadX 12930 16896 4096 4096
ReadX 12930 20992 4096 4096
ReadX 12930 25088 4096 4096
ReadX 12930 29184 4096 4096
ReadX 12930 33280 4096 4096
ReadX 12930 37376 4096 4096
ReadX 12930 41472 4096 4096
ReadX 12930 45568 4096 4096
ReadX 12930 49664 4096 4096
ReadX 12930 53760 4096 4096
ReadX 12930 57856 4096 4096
ReadX 12930 61952 4096 4096
ReadX 12930 66048 4096 4096
ReadX 12930 70144 4096 4096
ReadX 12930 497 20 20
ReadX 12930 496 103 103
ReadX 12930 500 448 448
ReadX 12930 470 512 512
ReadX 12930 486 2692 2692
ReadX 12930 290 4096 4096
ReadX 12930 4386 4096 4096
ReadX 12930 8482 4096 4096
ReadX 12930 500 20 20
ReadX 12930 483 108 108
ReadX 12930 482 292 292
ReadX 12930 338 4096 4096
ReadX 12930 4434 3103 3103
ReadX 12930 384 28 28
ReadX 12930 412 20 20
ReadX 12930 432 8 8
ReadX 12930 440 136 136
ReadX 12930 576 8 8
ReadX 12930 584 4 4
ReadX 12930 588 4 4
ReadX 12930 592 39 39
ReadX 12930 384 4 4
ReadX 12930 388 4 4
ReadX 12930 392 23 23
ReadX 12930 385 4 4
ReadX 12930 389 4 4
ReadX 12930 393 12 12
ReadX 12930 405 4 4
ReadX 12930 409 4 4
ReadX 12930 413 1 1
ReadX 12930 385 4 4
ReadX 12930 389 4 4
ReadX 12930 393 1 1
ReadX 12930 385 4 4
ReadX 12930 389 4 4
ReadX 12930 393 12 12
ReadX 12930 405 4 4
ReadX 12930 409 4 4
ReadX 12930 413 2 2
ReadX 12930 385 4 4
ReadX 12930 389 4 4
ReadX 12930 393 25 25
ReadX 12930 385 4 4
ReadX 12930 389 8 8
ReadX 12930 397 4 4
ReadX 12930 401 8 8
ReadX 12930 409 4 4
ReadX 12930 413 8 8
ReadX 12930 421 4 4
ReadX 12930 425 8 8
ReadX 12930 433 4 4
ReadX 12930 437 4 4
ReadX 12930 441 4 4
ReadX 12930 445 4 4
ReadX 12930 449 4 4
ReadX 12930 453 4 4
ReadX 12930 457 4 4
ReadX 12930 461 4 4
ReadX 12930 465 10670 10670
ReadX 12930 428 4096 4096
WriteX 12930 498 512 512
WriteX 12930 472 512 512
WriteX 12930 462 512 512
WriteX 12930 468 512 512
Close 12930
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12931
Close 12931
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 12932
QUERY_FILE_INFORMATION 12932
ReadX 12932 0 512 512
ReadX 12932 464 512 512
ReadX 12932 498 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 12933
Close 12933
Unlink \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 12932
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 12935
WriteX 12935 4607 1 1
QUERY_FILE_INFORMATION 12935
WriteX 12935 0 65471 65471
WriteX 12935 65471 65 65
WriteX 12935 65536 19979 19979
Close 12935
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12936
QUERY_FILE_INFORMATION 12936
ReadX 12936 0 512 512
ReadX 12936 462 512 512
ReadX 12936 974 512 512
ReadX 12936 1486 512 512
ReadX 12936 460 512 512
QUERY_FILE_INFORMATION 12936
QUERY_FILE_INFORMATION 12936
QUERY_FILE_INFORMATION 12936
WriteX 12936 470 448 448
QUERY_FILE_INFORMATION 12936
WriteX 12936 470 60 60
WriteX 12936 470 4 4
QUERY_FILE_INFORMATION 12936
WriteX 12936 470 11 11
QUERY_FILE_INFORMATION 12936
QUERY_FILE_INFORMATION 12936
WriteX 12936 464 512 512
WriteX 12936 976 512 512
WriteX 12936 1488 512 512
WriteX 12936 462 512 512
WriteX 12936 0 512 512
QUERY_FILE_INFORMATION 12936
QUERY_FILE_INFORMATION 12936
ReadX 12936 470 512 512
WriteX 12936 482 512 512
WriteX 12936 482 292 292
QUERY_FILE_INFORMATION 12936
QUERY_FILE_INFORMATION 12936
WriteX 12936 483 20 20
WriteX 12936 483 108 108
QUERY_FILE_INFORMATION 12936
WriteX 12936 484 448 448
QUERY_FILE_INFORMATION 12936
WriteX 12936 484 44 44
WriteX 12936 484 20 20
WriteX 12936 480 512 512
WriteX 12936 472 512 512
WriteX 12936 476 512 512
WriteX 12936 988 512 512
WriteX 12936 474 512 512
Flush 12936
WriteX 12936 0 512 512
Flush 12936
QUERY_FILE_INFORMATION 12936
QUERY_FILE_INFORMATION 12936
QUERY_FILE_INFORMATION 12936
WriteX 12936 480 512 512
WriteX 12936 472 512 512
WriteX 12936 476 512 512
QUERY_FILE_INFORMATION 12936
WriteX 12936 496 320 320
QUERY_FILE_INFORMATION 12936
WriteX 12936 496 60 60
ReadX 12936 484 512 512
WriteX 12936 500 512 512
WriteX 12936 470 512 512
WriteX 12936 486 2692 2692
QUERY_FILE_INFORMATION 12936
QUERY_FILE_INFORMATION 12936
WriteX 12936 497 25 25
WriteX 12936 496 103 103
QUERY_FILE_INFORMATION 12936
QUERY_FILE_INFORMATION 12936
WriteX 12936 497 44 44
WriteX 12936 497 20 20
WriteX 12936 498 512 512
WriteX 12936 462 512 512
WriteX 12936 466 512 512
WriteX 12936 978 512 512
WriteX 12936 464 512 512
Flush 12936
WriteX 12936 0 512 512
Flush 12936
QUERY_FILE_INFORMATION 12936
QUERY_FILE_INFORMATION 12936
QUERY_FILE_INFORMATION 12936
WriteX 12936 497 7 7
WriteX 12936 497 57 57
WriteX 12936 498 512 512
WriteX 12936 472 512 512
WriteX 12936 462 512 512
WriteX 12936 466 512 512
WriteX 12936 978 512 512
Flush 12936
WriteX 12936 498 512 512
Flush 12936
Close 12936
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12937
QUERY_FILE_INFORMATION 12937
ReadX 12937 0 512 512
ReadX 12937 464 512 512
ReadX 12937 498 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\ZD16.BMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\ZD16.BMP 0x40 0x1 12938
ReadX 12938 0 20 20
ReadX 12938 14 40 40
ReadX 12938 54 64 64
ReadX 12938 118 1152 1152
Close 12938
Close 12937
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12939
Close 12939
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12940
ReadX 12940 0 24 24
Close 12940
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12941
QUERY_FILE_INFORMATION 12941
ReadX 12941 0 512 512
ReadX 12941 464 512 512
ReadX 12941 498 512 512
ReadX 12941 472 512 512
ReadX 12941 462 512 512
ReadX 12941 466 512 512
ReadX 12941 978 512 512
ReadX 12941 497 57 57
Close 12941
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12942
QUERY_FILE_INFORMATION 12942
ReadX 12942 0 512 512
ReadX 12942 464 512 512
ReadX 12942 498 512 512
ReadX 12942 472 512 512
ReadX 12942 468 512 512
ReadX 12942 462 512 512
ReadX 12942 466 512 512
QUERY_FILE_INFORMATION 12942
WriteX 12942 482 60 60
WriteX 12942 482 4 4
QUERY_FILE_INFORMATION 12942
WriteX 12942 482 11 11
WriteX 12942 498 512 512
WriteX 12942 472 512 512
WriteX 12942 462 512 512
WriteX 12942 466 512 512
WriteX 12942 978 512 512
Close 12942
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP 0x40 0x2 12943
Close 12943
Unlink \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x200000 0x1 12944
Close 12944
Rename \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 12946
WriteX 12946 4607 1 1
QUERY_FILE_INFORMATION 12946
WriteX 12946 0 65471 65471
WriteX 12946 65471 65 65
WriteX 12946 65536 17654 17654
Close 12946
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12947
QUERY_FILE_INFORMATION 12947
ReadX 12947 0 512 512
ReadX 12947 474 512 512
ReadX 12947 986 512 512
ReadX 12947 1498 512 512
ReadX 12947 472 512 512
QUERY_FILE_INFORMATION 12947
QUERY_FILE_INFORMATION 12947
QUERY_FILE_INFORMATION 12947
WriteX 12947 482 448 448
QUERY_FILE_INFORMATION 12947
WriteX 12947 482 60 60
WriteX 12947 482 4 4
QUERY_FILE_INFORMATION 12947
WriteX 12947 482 11 11
QUERY_FILE_INFORMATION 12947
QUERY_FILE_INFORMATION 12947
WriteX 12947 476 512 512
WriteX 12947 988 512 512
WriteX 12947 1500 512 512
WriteX 12947 474 512 512
WriteX 12947 0 512 512
QUERY_FILE_INFORMATION 12947
QUERY_FILE_INFORMATION 12947
ReadX 12947 482 512 512
WriteX 12947 494 512 512
WriteX 12947 494 292 292
QUERY_FILE_INFORMATION 12947
QUERY_FILE_INFORMATION 12947
WriteX 12947 495 20 20
WriteX 12947 495 108 108
QUERY_FILE_INFORMATION 12947
WriteX 12947 496 448 448
QUERY_FILE_INFORMATION 12947
WriteX 12947 496 44 44
WriteX 12947 496 20 20
WriteX 12947 492 512 512
WriteX 12947 484 512 512
WriteX 12947 488 512 512
WriteX 12947 1000 512 512
WriteX 12947 486 512 512
Flush 12947
WriteX 12947 0 512 512
Flush 12947
QUERY_FILE_INFORMATION 12947
QUERY_FILE_INFORMATION 12947
QUERY_FILE_INFORMATION 12947
WriteX 12947 492 512 512
WriteX 12947 484 512 512
WriteX 12947 488 512 512
QUERY_FILE_INFORMATION 12947
WriteX 12947 508 320 320
QUERY_FILE_INFORMATION 12947
WriteX 12947 508 60 60
ReadX 12947 496 512 512
WriteX 12947 512 512 512
WriteX 12947 482 512 512
WriteX 12947 498 2692 2692
QUERY_FILE_INFORMATION 12947
QUERY_FILE_INFORMATION 12947
WriteX 12947 509 25 25
WriteX 12947 508 103 103
QUERY_FILE_INFORMATION 12947
QUERY_FILE_INFORMATION 12947
WriteX 12947 509 44 44
WriteX 12947 509 20 20
WriteX 12947 510 512 512
WriteX 12947 474 512 512
WriteX 12947 478 512 512
WriteX 12947 990 512 512
WriteX 12947 476 512 512
Flush 12947
WriteX 12947 0 512 512
Flush 12947
QUERY_FILE_INFORMATION 12947
QUERY_FILE_INFORMATION 12947
QUERY_FILE_INFORMATION 12947
WriteX 12947 509 7 7
WriteX 12947 509 57 57
WriteX 12947 510 512 512
WriteX 12947 484 512 512
WriteX 12947 474 512 512
WriteX 12947 478 512 512
WriteX 12947 990 512 512
Flush 12947
WriteX 12947 510 512 512
Flush 12947
Close 12947
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12948
Close 12948
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12949
QUERY_FILE_INFORMATION 12949
ReadX 12949 0 512 512
ReadX 12949 476 512 512
ReadX 12949 510 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP 0x40 0x1 12950
Close 12950
Unlink \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA 0x40 0x1 12951
QUERY_FILE_INFORMATION 12951
ReadX 12951 0 512 512
ReadX 12951 512 512 512
ReadX 12951 770 512 512
ReadX 12951 1282 512 512
ReadX 12951 1794 512 512
ReadX 12951 2562 512 512
ReadX 12951 3586 512 512
ReadX 12951 3828 512 512
ReadX 12951 288 512 512
ReadX 12951 1024 512 512
ReadX 12951 954 512 512
ReadX 12951 295 512 512
ReadX 12951 320 512 512
ReadX 12951 322 512 512
ReadX 12951 834 512 512
ReadX 12951 1346 512 512
ReadX 12951 1858 512 512
ReadX 12951 323 512 512
ReadX 12951 835 512 512
ReadX 12951 1347 512 512
ReadX 12951 1859 512 512
ReadX 12951 2371 345 345
ReadX 12951 322 167 167
ReadX 12951 489 512 512
ReadX 12951 1001 512 512
ReadX 12951 1513 512 512
ReadX 12951 2025 512 512
ReadX 12951 2537 512 512
ReadX 12951 3049 512 512
ReadX 12951 3561 345 345
ReadX 12951 323 167 167
ReadX 12951 490 512 512
ReadX 12951 1002 512 512
ReadX 12951 1514 512 512
ReadX 12951 2026 512 512
ReadX 12951 2538 512 512
ReadX 12951 3050 512 512
ReadX 12951 3562 512 512
ReadX 12951 4074 512 512
ReadX 12951 4586 512 512
ReadX 12951 5098 512 512
ReadX 12951 5610 512 512
ReadX 12951 6122 512 512
ReadX 12951 6634 512 512
ReadX 12951 7146 512 512
ReadX 12951 7658 512 512
ReadX 12951 8170 512 512
ReadX 12951 8682 512 512
ReadX 12951 9194 512 512
ReadX 12951 9706 512 512
ReadX 12951 10218 512 512
ReadX 12951 10730 345 345
ReadX 12951 11075 512 512
ReadX 12951 11587 167 167
ReadX 12951 11754 512 512
ReadX 12951 12266 512 512
ReadX 12951 12778 512 512
ReadX 12951 13290 512 512
ReadX 12951 13802 512 512
ReadX 12951 14314 512 512
ReadX 12951 14826 512 512
ReadX 12951 15338 512 512
ReadX 12951 337 512 512
ReadX 12951 337 512 512
ReadX 12951 849 34 34
ReadX 12951 352 512 512
ReadX 12951 864 512 512
ReadX 12951 1376 512 512
ReadX 12951 1888 512 512
ReadX 12951 2400 512 512
ReadX 12951 2912 512 512
ReadX 12951 3424 512 512
ReadX 12951 3936 512 512
ReadX 12951 1632 512 512
ReadX 12951 2144 512 512
ReadX 12951 1682 512 512
ReadX 12951 258 512 512
ReadX 12951 360 144 144
ReadX 12951 2517 512 512
ReadX 12951 3029 512 512
ReadX 12951 1751 512 512
ReadX 12951 2263 512 512
ReadX 12951 2775 512 512
ReadX 12951 3287 512 512
ReadX 12951 3799 512 512
ReadX 12951 4311 512 512
ReadX 12951 4823 512 512
ReadX 12951 5335 512 512
ReadX 12951 5847 512 512
ReadX 12951 6359 512 512
ReadX 12951 6871 512 512
ReadX 12951 7383 512 512
ReadX 12951 7895 512 512
ReadX 12951 8407 512 512
ReadX 12951 8919 512 512
ReadX 12951 9431 512 512
ReadX 12951 9943 512 512
ReadX 12951 10455 512 512
ReadX 12951 10967 512 512
ReadX 12951 11479 512 512
ReadX 12951 2556 512 512
ReadX 12951 3068 512 512
ReadX 12951 3580 512 512
ReadX 12951 4092 512 512
ReadX 12951 4604 512 512
ReadX 12951 5116 512 512
ReadX 12951 5628 512 512
ReadX 12951 6140 512 512
ReadX 12951 6652 512 512
ReadX 12951 7164 512 512
ReadX 12951 7676 512 512
ReadX 12951 8188 512 512
ReadX 12951 8700 512 512
ReadX 12951 9212 512 512
ReadX 12951 9724 512 512
ReadX 12951 10236 512 512
ReadX 12951 10748 512 512
ReadX 12951 11260 512 512
ReadX 12951 11772 512 512
ReadX 12951 12284 512 512
ReadX 12951 12796 49 49
ReadX 12951 260 463 463
ReadX 12951 723 512 512
ReadX 12951 1235 512 512
ReadX 12951 1747 512 512
ReadX 12951 2259 512 512
ReadX 12951 2771 512 512
ReadX 12951 3283 512 512
ReadX 12951 3795 512 512
ReadX 12951 4307 512 512
ReadX 12951 4819 512 512
ReadX 12951 5331 512 512
ReadX 12951 5843 512 512
ReadX 12951 6355 512 512
ReadX 12951 6867 512 512
ReadX 12951 7379 512 512
ReadX 12951 7891 512 512
ReadX 12951 8403 512 512
ReadX 12951 8915 512 512
ReadX 12951 9427 512 512
ReadX 12951 9939 512 512
ReadX 12951 10451 512 512
ReadX 12951 10963 402 402
ReadX 12951 593 240 240
ReadX 12951 2048 272 272
ReadX 12951 2320 512 512
ReadX 12951 2832 512 512
ReadX 12951 3344 512 512
ReadX 12951 3856 512 512
ReadX 12951 4368 512 512
ReadX 12951 4880 512 512
ReadX 12951 5392 240 240
ReadX 12951 608 272 272
ReadX 12951 880 512 512
ReadX 12951 1392 512 512
ReadX 12951 1904 512 512
ReadX 12951 2416 512 512
ReadX 12951 2928 512 512
ReadX 12951 3440 512 512
ReadX 12951 3952 512 512
ReadX 12951 4464 512 512
ReadX 12951 4976 512 512
ReadX 12951 5488 512 512
ReadX 12951 6000 512 512
ReadX 12951 6512 512 512
ReadX 12951 7024 512 512
ReadX 12951 7536 512 512
ReadX 12951 8048 512 512
ReadX 12951 8560 512 512
ReadX 12951 9072 512 512
ReadX 12951 9584 512 512
ReadX 12951 10096 512 512
ReadX 12951 1683 512 512
ReadX 12951 514 512 512
ReadX 12951 620 512 512
ReadX 12951 770 512 512
ReadX 12951 1282 512 512
ReadX 12951 1794 512 512
ReadX 12951 2000 512 512
ReadX 12951 1434 512 512
ReadX 12951 2050 512 512
ReadX 12951 2118 512 512
ReadX 12951 1715 512 512
ReadX 12951 1024 512 512
ReadX 12951 954 512 512
ReadX 12951 1880 512 512
ReadX 12951 1286 512 512
ReadX 12951 1510 512 512
ReadX 12951 2562 512 512
ReadX 12951 2610 512 512
ReadX 12951 3586 512 512
ReadX 12951 3812 512 512
ReadX 12951 3828 512 512
ReadX 12951 4046 512 512
ReadX 12951 4066 512 512
ReadX 12951 1747 512 512
ReadX 12951 1026 512 512
ReadX 12951 1538 512 512
ReadX 12951 514 512 512
ReadX 12951 751 512 512
ReadX 12951 1263 512 512
ReadX 12951 620 512 512
ReadX 12951 1132 512 512
ReadX 12951 1644 512 512
ReadX 12951 2156 512 512
ReadX 12951 2668 512 512
ReadX 12951 3180 512 512
ReadX 12951 3692 512 512
ReadX 12951 4204 394 394
ReadX 12951 606 118 118
ReadX 12951 724 512 512
ReadX 12951 1236 512 512
ReadX 12951 1748 512 512
ReadX 12951 2260 512 512
ReadX 12951 2772 512 512
ReadX 12951 3284 512 512
ReadX 12951 3796 394 394
ReadX 12951 636 118 118
ReadX 12951 754 512 512
ReadX 12951 1266 512 512
ReadX 12951 1778 512 512
ReadX 12951 2290 512 512
ReadX 12951 2802 512 512
ReadX 12951 3314 512 512
ReadX 12951 3826 512 512
ReadX 12951 4338 512 512
ReadX 12951 4850 512 512
ReadX 12951 5362 512 512
ReadX 12951 5874 512 512
ReadX 12951 6386 512 512
ReadX 12951 6898 512 512
ReadX 12951 7410 512 512
ReadX 12951 7922 512 512
ReadX 12951 8434 512 512
ReadX 12951 8946 512 512
ReadX 12951 9458 512 512
ReadX 12951 9970 512 512
ReadX 12951 10482 512 512
ReadX 12951 723 512 512
ReadX 12951 1235 512 512
ReadX 12951 725 512 512
ReadX 12951 729 512 512
ReadX 12951 1241 512 512
ReadX 12951 1753 512 512
ReadX 12951 2265 512 512
ReadX 12951 2777 512 512
ReadX 12951 3289 512 512
ReadX 12951 3801 512 512
ReadX 12951 4313 512 512
ReadX 12951 4825 512 512
ReadX 12951 5337 512 512
ReadX 12951 5849 512 512
ReadX 12951 6361 512 512
ReadX 12951 755 512 512
ReadX 12951 1267 512 512
ReadX 12951 1779 512 512
ReadX 12951 2291 512 512
ReadX 12951 2803 512 512
ReadX 12951 3315 512 512
ReadX 12951 3827 512 512
ReadX 12951 4339 244 244
ReadX 12951 4583 512 512
ReadX 12951 5095 268 268
ReadX 12951 5363 512 512
ReadX 12951 5875 512 512
ReadX 12951 6387 512 512
ReadX 12951 6899 512 512
ReadX 12951 7411 512 512
ReadX 12951 7923 512 512
ReadX 12951 8435 512 512
ReadX 12951 8947 512 512
ReadX 12951 9459 512 512
ReadX 12951 9971 512 512
ReadX 12951 10483 512 512
ReadX 12951 10995 512 512
ReadX 12951 11507 512 512
ReadX 12951 12019 512 512
ReadX 12951 12531 512 512
ReadX 12951 13043 512 512
ReadX 12951 13555 512 512
ReadX 12951 14067 512 512
ReadX 12951 14579 512 512
ReadX 12951 15091 512 512
ReadX 12951 15603 342 342
ReadX 12951 725 512 512
ReadX 12951 2000 512 512
ReadX 12951 3918 512 512
ReadX 12951 727 512 512
ReadX 12951 258 512 512
ReadX 12951 376 512 512
ReadX 12951 1109 512 512
ReadX 12951 1028 512 512
ReadX 12951 1540 512 512
ReadX 12951 2052 512 512
ReadX 12951 2564 512 512
ReadX 12951 3076 512 512
ReadX 12951 3588 512 512
ReadX 12951 4100 512 512
ReadX 12951 4612 412 412
ReadX 12951 1012 100 100
ReadX 12951 1112 512 512
ReadX 12951 1624 512 512
ReadX 12951 2136 512 512
ReadX 12951 2648 512 512
ReadX 12951 3160 512 512
ReadX 12951 3672 512 512
ReadX 12951 4184 412 412
ReadX 12951 1044 100 100
ReadX 12951 1144 512 512
ReadX 12951 1656 512 512
ReadX 12951 2168 512 512
ReadX 12951 2680 512 512
ReadX 12951 3192 512 512
ReadX 12951 3704 512 512
ReadX 12951 4216 512 512
ReadX 12951 4728 512 512
ReadX 12951 5240 512 512
ReadX 12951 5752 512 512
ReadX 12951 6264 512 512
ReadX 12951 6776 512 512
QUERY_FS_INFORMATION 259
ReadX 12951 7288 512 512
ReadX 12951 7800 512 512
ReadX 12951 8312 512 512
ReadX 12951 8824 512 512
ReadX 12951 9336 512 512
ReadX 12951 9848 512 512
ReadX 12951 10360 512 512
ReadX 12951 10872 512 512
ReadX 12951 11384 512 512
ReadX 12951 11896 512 512
ReadX 12951 12408 512 512
ReadX 12951 1088 512 512
ReadX 12951 1600 512 512
ReadX 12951 1090 512 512
ReadX 12951 1094 512 512
ReadX 12951 1606 512 512
ReadX 12951 2118 512 512
ReadX 12951 2630 512 512
ReadX 12951 3142 512 512
ReadX 12951 3654 512 512
ReadX 12951 4166 512 512
ReadX 12951 4678 512 512
ReadX 12951 1111 512 512
ReadX 12951 1623 512 512
ReadX 12951 2135 512 512
ReadX 12951 2647 512 512
ReadX 12951 3159 512 512
ReadX 12951 3671 512 512
ReadX 12951 4183 512 512
ReadX 12951 4695 512 512
ReadX 12951 5207 512 512
ReadX 12951 5719 512 512
ReadX 12951 6231 512 512
ReadX 12951 6743 512 512
ReadX 12951 7255 512 512
ReadX 12951 7767 512 512
ReadX 12951 8279 512 512
ReadX 12951 8791 512 512
ReadX 12951 9303 512 512
ReadX 12951 9815 512 512
ReadX 12951 10327 512 512
ReadX 12951 10839 512 512
ReadX 12951 11351 294 294
ReadX 12951 1091 512 512
ReadX 12951 970 512 512
ReadX 12951 1093 512 512
ReadX 12951 1434 512 512
ReadX 12951 2050 512 512
ReadX 12951 2158 512 512
ReadX 12951 2118 512 512
ReadX 12951 2630 512 512
ReadX 12951 3142 512 512
ReadX 12951 3654 512 512
ReadX 12951 4166 512 512
ReadX 12951 4678 512 512
ReadX 12951 5190 512 512
ReadX 12951 5702 382 382
ReadX 12951 2104 130 130
ReadX 12951 2234 512 512
ReadX 12951 2746 512 512
ReadX 12951 3258 512 512
ReadX 12951 3770 512 512
ReadX 12951 4282 512 512
ReadX 12951 4794 512 512
ReadX 12951 5306 382 382
ReadX 12951 2134 130 130
ReadX 12951 2264 512 512
ReadX 12951 2776 512 512
ReadX 12951 3288 512 512
ReadX 12951 3800 512 512
ReadX 12951 4312 512 512
ReadX 12951 4824 512 512
ReadX 12951 5336 512 512
ReadX 12951 2147 512 512
ReadX 12951 2149 512 512
ReadX 12951 2152 512 512
ReadX 12951 2664 512 512
ReadX 12951 3176 512 512
ReadX 12951 3688 512 512
ReadX 12951 2159 512 512
ReadX 12951 2671 512 512
ReadX 12951 3183 512 512
ReadX 12951 3695 512 512
ReadX 12951 4207 512 512
ReadX 12951 4719 512 512
ReadX 12951 5231 512 512
ReadX 12951 5743 512 512
ReadX 12951 6255 512 512
ReadX 12951 6767 512 512
ReadX 12951 7279 512 512
ReadX 12951 7791 512 512
ReadX 12951 8303 512 512
ReadX 12951 8815 512 512
ReadX 12951 9327 512 512
ReadX 12951 9839 512 512
ReadX 12951 10351 512 512
ReadX 12951 10863 512 512
ReadX 12951 11375 512 512
ReadX 12951 11887 512 512
ReadX 12951 12399 38 38
ReadX 12951 2149 512 512
ReadX 12951 1794 512 512
ReadX 12951 2016 512 512
ReadX 12951 2151 512 512
ReadX 12951 1918 512 512
ReadX 12951 1880 512 512
ReadX 12951 2392 512 512
ReadX 12951 2904 512 512
ReadX 12951 3416 512 512
ReadX 12951 3928 512 512
ReadX 12951 4440 512 512
ReadX 12951 4952 512 512
ReadX 12951 5464 416 416
ReadX 12951 1866 96 96
ReadX 12951 1962 512 512
ReadX 12951 2474 512 512
ReadX 12951 2986 512 512
ReadX 12951 3498 512 512
ReadX 12951 4010 512 512
ReadX 12951 4522 512 512
ReadX 12951 5034 416 416
ReadX 12951 1896 96 96
ReadX 12951 1992 512 512
ReadX 12951 2504 512 512
ReadX 12951 3016 512 512
ReadX 12951 3528 512 512
ReadX 12951 1903 512 512
ReadX 12951 1905 512 512
ReadX 12951 1908 512 512
ReadX 12951 2420 512 512
ReadX 12951 2932 512 512
ReadX 12951 3444 512 512
ReadX 12951 3956 512 512
ReadX 12951 1919 512 512
ReadX 12951 2431 512 512
ReadX 12951 2943 512 512
ReadX 12951 3455 512 512
ReadX 12951 3967 512 512
ReadX 12951 4479 512 512
ReadX 12951 4991 512 512
ReadX 12951 5503 512 512
ReadX 12951 6015 512 512
ReadX 12951 6527 512 512
ReadX 12951 7039 512 512
ReadX 12951 7551 512 512
ReadX 12951 8063 512 512
ReadX 12951 8575 512 512
ReadX 12951 9087 512 512
ReadX 12951 9599 512 512
ReadX 12951 10111 512 512
ReadX 12951 10623 512 512
ReadX 12951 11135 512 512
ReadX 12951 11647 512 512
ReadX 12951 12159 322 322
ReadX 12951 1905 512 512
ReadX 12951 1846 512 512
ReadX 12951 1907 512 512
ReadX 12951 1860 268 268
ReadX 12951 1832 244 244
ReadX 12951 1846 512 512
ReadX 12951 2358 512 512
ReadX 12951 2870 512 512
ReadX 12951 3382 512 512
ReadX 12951 3894 512 512
ReadX 12951 4406 512 512
ReadX 12951 4918 512 512
ReadX 12951 1858 512 512
ReadX 12951 1859 512 512
ReadX 12951 1860 488 488
ReadX 12951 1832 24 24
ReadX 12951 1861 228 228
ReadX 12951 1832 284 284
ReadX 12951 2116 512 512
ReadX 12951 2628 512 512
ReadX 12951 3140 512 512
ReadX 12951 3652 512 512
ReadX 12951 4164 512 512
ReadX 12951 4676 512 512
ReadX 12951 5188 228 228
ReadX 12951 1862 284 284
ReadX 12951 2146 512 512
ReadX 12951 2658 38 38
ReadX 12951 1859 512 512
ReadX 12951 2047 512 512
ReadX 12951 2016 512 512
ReadX 12951 2528 512 512
ReadX 12951 3040 512 512
ReadX 12951 3552 512 512
ReadX 12951 4064 512 512
ReadX 12951 4576 512 512
ReadX 12951 5088 512 512
ReadX 12951 5600 424 424
ReadX 12951 2002 88 88
ReadX 12951 2090 512 512
ReadX 12951 2602 512 512
ReadX 12951 3114 512 512
ReadX 12951 3626 512 512
ReadX 12951 4138 512 512
ReadX 12951 4650 512 512
ReadX 12951 5162 424 424
ReadX 12951 2032 88 88
ReadX 12951 2120 512 512
ReadX 12951 2632 512 512
ReadX 12951 3144 512 512
ReadX 12951 3656 512 512
ReadX 12951 4168 512 512
ReadX 12951 4680 512 512
ReadX 12951 5192 512 512
ReadX 12951 2044 512 512
ReadX 12951 2045 512 512
ReadX 12951 2046 512 512
ReadX 12951 2047 512 512
ReadX 12951 2559 110 110
ReadX 12951 2052 402 402
ReadX 12951 2454 512 512
ReadX 12951 2966 512 512
ReadX 12951 3478 512 512
ReadX 12951 3990 512 512
ReadX 12951 4502 512 512
ReadX 12951 5014 512 512
ReadX 12951 5526 512 512
ReadX 12951 6038 512 512
ReadX 12951 6550 512 512
ReadX 12951 7062 512 512
ReadX 12951 7574 512 512
ReadX 12951 8086 512 512
ReadX 12951 8598 512 512
ReadX 12951 9110 512 512
ReadX 12951 9622 512 512
ReadX 12951 10134 512 512
ReadX 12951 10646 512 512
ReadX 12951 11158 512 512
ReadX 12951 11670 512 512
ReadX 12951 12182 512 512
ReadX 12951 12694 118 118
ReadX 12951 2045 512 512
ReadX 12951 1282 512 512
ReadX 12951 1343 512 512
ReadX 12951 1286 512 512
ReadX 12951 1798 512 512
ReadX 12951 2310 512 512
ReadX 12951 2822 512 512
ReadX 12951 3334 512 512
ReadX 12951 3846 512 512
ReadX 12951 4358 512 512
ReadX 12951 4870 416 416
ReadX 12951 1270 96 96
ReadX 12951 1366 512 512
ReadX 12951 1878 512 512
ReadX 12951 2390 512 512
ReadX 12951 2902 512 512
ReadX 12951 3414 512 512
ReadX 12951 3926 416 416
ReadX 12951 1284 96 96
ReadX 12951 1380 416 416
ReadX 12951 1302 96 96
ReadX 12951 1398 512 512
ReadX 12951 1910 512 512
ReadX 12951 2422 512 512
ReadX 12951 2934 512 512
ReadX 12951 3446 512 512
ReadX 12951 3958 512 512
ReadX 12951 4470 512 512
ReadX 12951 4982 512 512
ReadX 12951 5494 512 512
ReadX 12951 6006 512 512
ReadX 12951 6518 512 512
ReadX 12951 7030 512 512
ReadX 12951 7542 512 512
ReadX 12951 1328 512 512
ReadX 12951 1330 512 512
ReadX 12951 1333 512 512
ReadX 12951 1845 512 512
ReadX 12951 2357 512 512
ReadX 12951 2869 512 512
ReadX 12951 3381 512 512
ReadX 12951 1344 512 512
ReadX 12951 1856 512 512
ReadX 12951 2368 512 512
ReadX 12951 2880 512 512
ReadX 12951 3392 512 512
ReadX 12951 3904 512 512
ReadX 12951 4416 512 512
ReadX 12951 4928 512 512
ReadX 12951 5440 512 512
ReadX 12951 5952 512 512
ReadX 12951 6464 512 512
ReadX 12951 6976 512 512
ReadX 12951 7488 512 512
ReadX 12951 8000 512 512
ReadX 12951 8512 512 512
ReadX 12951 9024 512 512
ReadX 12951 9536 512 512
ReadX 12951 10048 512 512
ReadX 12951 10560 512 512
ReadX 12951 11072 512 512
ReadX 12951 11584 426 426
ReadX 12951 1330 512 512
ReadX 12951 1842 512 512
ReadX 12951 1250 512 512
ReadX 12951 1264 268 268
ReadX 12951 1236 244 244
ReadX 12951 1250 512 512
ReadX 12951 1762 512 512
ReadX 12951 2274 512 512
ReadX 12951 2786 512 512
ReadX 12951 3298 512 512
ReadX 12951 3810 512 512
ReadX 12951 4322 512 512
ReadX 12951 1262 512 512
ReadX 12951 1263 512 512
ReadX 12951 1264 488 488
ReadX 12951 1236 24 24
ReadX 12951 1265 228 228
ReadX 12951 1236 284 284
ReadX 12951 1520 512 512
ReadX 12951 2032 512 512
ReadX 12951 2544 512 512
ReadX 12951 3056 512 512
ReadX 12951 3568 512 512
ReadX 12951 4080 512 512
ReadX 12951 4592 228 228
ReadX 12951 1266 284 284
ReadX 12951 1550 512 512
ReadX 12951 2062 42 42
ReadX 12951 1263 512 512
ReadX 12951 1538 512 512
ReadX 12951 1640 512 512
ReadX 12951 1510 512 512
ReadX 12951 2022 512 512
ReadX 12951 2534 512 512
ReadX 12951 3046 512 512
ReadX 12951 3558 512 512
ReadX 12951 4070 512 512
ReadX 12951 4582 512 512
ReadX 12951 5094 408 408
ReadX 12951 1496 104 104
ReadX 12951 1600 512 512
ReadX 12951 2112 512 512
ReadX 12951 2624 512 512
ReadX 12951 3136 512 512
ReadX 12951 3648 512 512
ReadX 12951 4160 512 512
ReadX 12951 4672 408 408
ReadX 12951 1526 104 104
ReadX 12951 1630 512 512
ReadX 12951 2142 512 512
ReadX 12951 2654 512 512
ReadX 12951 3166 512 512
ReadX 12951 3678 512 512
ReadX 12951 4190 408 408
ReadX 12951 1540 104 104
ReadX 12951 1644 512 512
ReadX 12951 2156 512 512
ReadX 12951 2668 512 512
ReadX 12951 3180 512 512
ReadX 12951 3692 512 512
ReadX 12951 4204 512 512
ReadX 12951 4716 512 512
ReadX 12951 5228 512 512
ReadX 12951 5740 512 512
ReadX 12951 6252 512 512
ReadX 12951 6764 512 512
ReadX 12951 7276 512 512
ReadX 12951 7788 512 512
ReadX 12951 8300 512 512
ReadX 12951 8812 512 512
ReadX 12951 9324 512 512
ReadX 12951 9836 512 512
ReadX 12951 10348 512 512
ReadX 12951 10860 512 512
ReadX 12951 11372 512 512
ReadX 12951 1615 512 512
ReadX 12951 2127 512 512
ReadX 12951 1617 512 512
ReadX 12951 1621 512 512
ReadX 12951 2133 512 512
ReadX 12951 2645 512 512
ReadX 12951 3157 512 512
ReadX 12951 3669 512 512
ReadX 12951 4181 512 512
ReadX 12951 4693 512 512
ReadX 12951 5205 512 512
ReadX 12951 5717 512 512
ReadX 12951 6229 512 512
ReadX 12951 1641 512 512
ReadX 12951 2153 512 512
ReadX 12951 2665 512 512
ReadX 12951 3177 512 512
ReadX 12951 3689 512 512
ReadX 12951 4201 512 512
ReadX 12951 4713 512 512
ReadX 12951 5225 512 512
ReadX 12951 5737 512 512
ReadX 12951 6249 512 512
ReadX 12951 6761 512 512
ReadX 12951 7273 512 512
ReadX 12951 7785 512 512
ReadX 12951 8297 512 512
ReadX 12951 8809 512 512
ReadX 12951 9321 512 512
ReadX 12951 9833 512 512
ReadX 12951 10345 512 512
ReadX 12951 10857 512 512
ReadX 12951 11369 512 512
ReadX 12951 11881 2 2
ReadX 12951 1796 510 510
ReadX 12951 2306 512 512
ReadX 12951 2818 512 512
ReadX 12951 3330 512 512
ReadX 12951 3842 512 512
ReadX 12951 4354 512 512
ReadX 12951 4866 512 512
ReadX 12951 5378 512 512
ReadX 12951 5890 512 512
ReadX 12951 6402 512 512
ReadX 12951 6914 512 512
ReadX 12951 7426 512 512
ReadX 12951 7938 512 512
ReadX 12951 8450 512 512
ReadX 12951 8962 512 512
ReadX 12951 9474 512 512
ReadX 12951 9986 512 512
ReadX 12951 10498 326 326
ReadX 12951 1617 512 512
ReadX 12951 2129 512 512
ReadX 12951 1450 512 512
ReadX 12951 1621 512 512
ReadX 12951 1446 512 512
ReadX 12951 1450 512 512
ReadX 12951 1962 512 512
ReadX 12951 2474 512 512
ReadX 12951 2986 512 512
ReadX 12951 3498 512 512
ReadX 12951 4010 512 512
ReadX 12951 4522 512 512
ReadX 12951 5034 424 424
ReadX 12951 1436 88 88
ReadX 12951 1524 512 512
ReadX 12951 2036 512 512
ReadX 12951 2548 512 512
ReadX 12951 3060 512 512
ReadX 12951 1442 512 512
ReadX 12951 1443 512 512
ReadX 12951 1444 512 512
ReadX 12951 1446 512 512
ReadX 12951 1958 386 386
ReadX 12951 1466 126 126
ReadX 12951 1592 512 512
ReadX 12951 2104 512 512
ReadX 12951 2616 512 512
ReadX 12951 3128 512 512
ReadX 12951 3640 512 512
ReadX 12951 4152 512 512
ReadX 12951 4664 512 512
ReadX 12951 5176 512 512
ReadX 12951 5688 512 512
ReadX 12951 6200 512 512
ReadX 12951 6712 512 512
ReadX 12951 7224 512 512
ReadX 12951 7736 512 512
ReadX 12951 8248 512 512
ReadX 12951 8760 294 294
ReadX 12951 1443 512 512
ReadX 12951 964 512 512
ReadX 12951 970 512 512
ReadX 12951 1482 512 512
ReadX 12951 1994 512 512
ReadX 12951 2506 512 512
ReadX 12951 3018 512 512
ReadX 12951 3530 512 512
ReadX 12951 4042 512 512
ReadX 12951 4554 424 424
ReadX 12951 956 88 88
ReadX 12951 1044 512 512
ReadX 12951 1556 512 512
ReadX 12951 2068 512 512
ReadX 12951 2580 512 512
ReadX 12951 962 512 512
ReadX 12951 963 512 512
ReadX 12951 964 512 512
ReadX 12951 965 512 512
ReadX 12951 1477 512 512
ReadX 12951 1989 228 228
ReadX 12951 986 284 284
ReadX 12951 1270 512 512
ReadX 12951 1782 512 512
ReadX 12951 2294 512 512
ReadX 12951 2806 512 512
ReadX 12951 3318 512 512
ReadX 12951 3830 512 512
ReadX 12951 4342 512 512
ReadX 12951 4854 512 512
ReadX 12951 5366 512 512
ReadX 12951 5878 512 512
ReadX 12951 6390 512 512
ReadX 12951 6902 512 512
ReadX 12951 7414 42 42
ReadX 12951 963 512 512
ReadX 12951 2610 512 512
ReadX 12951 3812 512 512
ReadX 12951 3828 512 512
ReadX 12951 3969 512 512
ReadX 12951 3918 512 512
ReadX 12951 4430 512 512
ReadX 12951 4942 512 512
ReadX 12951 5454 512 512
ReadX 12951 5966 512 512
ReadX 12951 6478 512 512
ReadX 12951 6990 512 512
ReadX 12951 7502 424 424
ReadX 12951 3904 88 88
ReadX 12951 3992 512 512
ReadX 12951 4504 512 512
ReadX 12951 5016 512 512
ReadX 12951 5528 512 512
ReadX 12951 6040 512 512
ReadX 12951 6552 512 512
ReadX 12951 7064 424 424
ReadX 12951 3934 88 88
ReadX 12951 4022 512 512
ReadX 12951 4534 512 512
ReadX 12951 5046 512 512
ReadX 12951 5558 512 512
ReadX 12951 6070 512 512
ReadX 12951 6582 512 512
ReadX 12951 7094 512 512
ReadX 12951 7606 512 512
ReadX 12951 8118 512 512
ReadX 12951 8630 512 512
ReadX 12951 3953 512 512
ReadX 12951 4465 512 512
ReadX 12951 3956 512 512
ReadX 12951 3964 512 512
ReadX 12951 4476 512 512
ReadX 12951 4988 512 512
ReadX 12951 3970 512 512
ReadX 12951 4482 512 512
ReadX 12951 4994 512 512
ReadX 12951 5506 512 512
ReadX 12951 6018 512 512
ReadX 12951 6530 512 512
ReadX 12951 7042 512 512
ReadX 12951 7554 512 512
ReadX 12951 8066 512 512
ReadX 12951 8578 512 512
ReadX 12951 9090 512 512
ReadX 12951 9602 512 512
ReadX 12951 10114 512 512
ReadX 12951 10626 512 512
ReadX 12951 11138 512 512
ReadX 12951 11650 512 512
ReadX 12951 12162 512 512
ReadX 12951 12674 512 512
ReadX 12951 13186 512 512
ReadX 12951 13698 512 512
ReadX 12951 14210 134 134
ReadX 12951 3956 512 512
ReadX 12951 4468 512 512
ReadX 12951 4980 512 512
ReadX 12951 5492 512 512
ReadX 12951 3074 512 512
ReadX 12951 3246 512 512
ReadX 12951 3964 512 512
ReadX 12951 3330 512 512
ReadX 12951 3465 512 512
ReadX 12951 3246 512 512
ReadX 12951 3758 512 512
ReadX 12951 4270 512 512
ReadX 12951 4782 512 512
ReadX 12951 5294 512 512
ReadX 12951 5806 512 512
ReadX 12951 6318 512 512
ReadX 12951 6830 368 368
ReadX 12951 3232 144 144
ReadX 12951 3376 512 512
ReadX 12951 3888 512 512
ReadX 12951 4400 512 512
ReadX 12951 4912 512 512
ReadX 12951 5424 512 512
ReadX 12951 5936 512 512
ReadX 12951 6448 368 368
ReadX 12951 3262 144 144
ReadX 12951 3406 512 512
ReadX 12951 3918 512 512
ReadX 12951 4430 512 512
ReadX 12951 4942 512 512
ReadX 12951 5454 512 512
ReadX 12951 5966 512 512
ReadX 12951 6478 512 512
ReadX 12951 6990 512 512
ReadX 12951 7502 512 512
ReadX 12951 8014 512 512
ReadX 12951 8526 512 512
ReadX 12951 9038 512 512
ReadX 12951 9550 512 512
ReadX 12951 10062 512 512
ReadX 12951 10574 512 512
ReadX 12951 11086 512 512
ReadX 12951 11598 512 512
ReadX 12951 12110 512 512
ReadX 12951 12622 512 512
ReadX 12951 13134 512 512
ReadX 12951 13646 368 368
ReadX 12951 3332 144 144
ReadX 12951 3476 512 512
ReadX 12951 3988 512 512
ReadX 12951 4500 512 512
ReadX 12951 5012 512 512
ReadX 12951 5524 512 512
ReadX 12951 6036 512 512
ReadX 12951 6548 512 512
ReadX 12951 7060 512 512
ReadX 12951 7572 512 512
ReadX 12951 8084 512 512
ReadX 12951 8596 512 512
ReadX 12951 9108 512 512
ReadX 12951 9620 512 512
ReadX 12951 10132 512 512
ReadX 12951 10644 512 512
ReadX 12951 11156 512 512
ReadX 12951 11668 512 512
ReadX 12951 12180 512 512
ReadX 12951 12692 512 512
ReadX 12951 13204 512 512
ReadX 12951 3430 512 512
ReadX 12951 3942 512 512
ReadX 12951 3434 512 512
ReadX 12951 3435 512 512
ReadX 12951 3947 512 512
ReadX 12951 4459 512 512
ReadX 12951 4971 512 512
ReadX 12951 5483 512 512
ReadX 12951 5995 512 512
ReadX 12951 6507 512 512
ReadX 12951 7019 512 512
ReadX 12951 7531 512 512
ReadX 12951 8043 512 512
ReadX 12951 8555 512 512
ReadX 12951 9067 512 512
ReadX 12951 9579 512 512
ReadX 12951 10091 512 512
ReadX 12951 10603 512 512
ReadX 12951 11115 512 512
ReadX 12951 3467 512 512
ReadX 12951 3979 512 512
ReadX 12951 4491 512 512
ReadX 12951 5003 512 512
ReadX 12951 5515 512 512
ReadX 12951 6027 512 512
ReadX 12951 6539 512 512
ReadX 12951 7051 512 512
ReadX 12951 7563 512 512
ReadX 12951 8075 512 512
ReadX 12951 8587 512 512
ReadX 12951 9099 512 512
ReadX 12951 9611 512 512
ReadX 12951 10123 512 512
ReadX 12951 10635 512 512
ReadX 12951 11147 512 512
ReadX 12951 11659 512 512
ReadX 12951 12171 512 512
ReadX 12951 12683 512 512
ReadX 12951 13195 512 512
ReadX 12951 13707 56 56
ReadX 12951 13763 512 512
ReadX 12951 14275 456 456
ReadX 12951 14731 512 512
ReadX 12951 15243 512 512
ReadX 12951 15755 512 512
ReadX 12951 16267 512 512
ReadX 12951 16779 512 512
ReadX 12951 17291 512 512
ReadX 12951 17803 512 512
ReadX 12951 18315 512 512
ReadX 12951 18827 512 512
ReadX 12951 19339 512 512
ReadX 12951 19851 512 512
ReadX 12951 20363 512 512
ReadX 12951 20875 512 512
ReadX 12951 21387 512 512
ReadX 12951 21899 512 512
ReadX 12951 22411 512 512
ReadX 12951 22923 512 512
ReadX 12951 23435 512 512
ReadX 12951 23947 512 512
ReadX 12951 24459 512 512
ReadX 12951 24971 282 282
ReadX 12951 3434 512 512
ReadX 12951 2818 512 512
ReadX 12951 2870 512 512
ReadX 12951 3026 512 512
ReadX 12951 3538 512 512
ReadX 12951 2870 512 512
ReadX 12951 3382 512 512
ReadX 12951 3894 512 512
ReadX 12951 4406 512 512
ReadX 12951 4918 512 512
ReadX 12951 5430 512 512
ReadX 12951 5942 512 512
ReadX 12951 6454 374 374
ReadX 12951 2856 138 138
ReadX 12951 2994 512 512
ReadX 12951 3506 512 512
ReadX 12951 4018 512 512
ReadX 12951 4530 512 512
ReadX 12951 5042 512 512
ReadX 12951 5554 512 512
ReadX 12951 6066 374 374
ReadX 12951 2886 138 138
ReadX 12951 3024 512 512
ReadX 12951 3536 512 512
ReadX 12951 4048 512 512
ReadX 12951 4560 512 512
ReadX 12951 5072 512 512
ReadX 12951 5584 512 512
ReadX 12951 6096 512 512
ReadX 12951 6608 512 512
ReadX 12951 7120 512 512
ReadX 12951 7632 512 512
ReadX 12951 8144 512 512
ReadX 12951 8656 512 512
ReadX 12951 9168 512 512
ReadX 12951 9680 512 512
ReadX 12951 10192 512 512
ReadX 12951 10704 512 512
ReadX 12951 11216 512 512
ReadX 12951 11728 512 512
ReadX 12951 12240 512 512
ReadX 12951 12752 512 512
QUERY_FS_INFORMATION 259
ReadX 12951 13264 512 512
ReadX 12951 13776 512 512
ReadX 12951 14288 512 512
ReadX 12951 14800 512 512
ReadX 12951 15312 512 512
ReadX 12951 15824 512 512
ReadX 12951 16336 512 512
ReadX 12951 16848 512 512
ReadX 12951 17360 512 512
ReadX 12951 17872 512 512
ReadX 12951 18384 512 512
ReadX 12951 18896 512 512
ReadX 12951 19408 512 512
ReadX 12951 19920 512 512
ReadX 12951 20432 512 512
ReadX 12951 20944 512 512
ReadX 12951 21456 512 512
ReadX 12951 21968 512 512
ReadX 12951 22480 512 512
ReadX 12951 22992 512 512
ReadX 12951 2998 512 512
ReadX 12951 3510 512 512
ReadX 12951 3001 512 512
ReadX 12951 3003 512 512
ReadX 12951 3515 512 512
ReadX 12951 4027 512 512
ReadX 12951 4539 512 512
ReadX 12951 5051 512 512
ReadX 12951 5563 512 512
ReadX 12951 6075 512 512
ReadX 12951 6587 512 512
ReadX 12951 7099 512 512
ReadX 12951 7611 512 512
ReadX 12951 8123 512 512
ReadX 12951 8635 512 512
ReadX 12951 3029 512 512
ReadX 12951 3541 512 512
ReadX 12951 4053 512 512
ReadX 12951 4565 512 512
ReadX 12951 5077 512 512
ReadX 12951 5589 512 512
ReadX 12951 6101 512 512
ReadX 12951 6613 512 512
ReadX 12951 7125 512 512
ReadX 12951 7637 512 512
ReadX 12951 8149 512 512
ReadX 12951 8661 512 512
ReadX 12951 9173 512 512
ReadX 12951 9685 512 512
ReadX 12951 10197 512 512
ReadX 12951 10709 512 512
ReadX 12951 11221 512 512
ReadX 12951 11733 512 512
ReadX 12951 12245 512 512
ReadX 12951 12757 512 512
ReadX 12951 13269 40 40
ReadX 12951 3076 472 472
ReadX 12951 3548 512 512
ReadX 12951 4060 512 512
ReadX 12951 4572 512 512
ReadX 12951 5084 512 512
ReadX 12951 5596 512 512
ReadX 12951 6108 512 512
ReadX 12951 6620 512 512
ReadX 12951 7132 512 512
ReadX 12951 7644 512 512
ReadX 12951 8156 512 512
ReadX 12951 8668 512 512
ReadX 12951 9180 512 512
ReadX 12951 9692 512 512
ReadX 12951 10204 512 512
ReadX 12951 10716 512 512
ReadX 12951 11228 512 512
ReadX 12951 11740 512 512
ReadX 12951 12252 512 512
ReadX 12951 12764 512 512
ReadX 12951 13276 310 310
ReadX 12951 3001 512 512
ReadX 12951 2562 512 512
ReadX 12951 2626 512 512
ReadX 12951 3003 512 512
ReadX 12951 2721 512 512
ReadX 12951 2626 512 512
ReadX 12951 3138 512 512
ReadX 12951 3650 512 512
ReadX 12951 4162 512 512
ReadX 12951 4674 512 512
ReadX 12951 5186 512 512
ReadX 12951 5698 512 512
ReadX 12951 6210 424 424
ReadX 12951 2612 88 88
ReadX 12951 2700 512 512
ReadX 12951 3212 512 512
ReadX 12951 3724 512 512
ReadX 12951 4236 512 512
ReadX 12951 4748 512 512
ReadX 12951 5260 512 512
ReadX 12951 5772 424 424
ReadX 12951 2642 88 88
ReadX 12951 2730 512 512
ReadX 12951 3242 512 512
ReadX 12951 3754 512 512
ReadX 12951 4266 512 512
ReadX 12951 4778 512 512
ReadX 12951 5290 512 512
ReadX 12951 5802 512 512
ReadX 12951 6314 512 512
ReadX 12951 6826 512 512
ReadX 12951 7338 512 512
ReadX 12951 7850 512 512
ReadX 12951 8362 512 512
ReadX 12951 8874 512 512
ReadX 12951 9386 512 512
ReadX 12951 9898 512 512
ReadX 12951 10410 512 512
ReadX 12951 10922 512 512
ReadX 12951 11434 512 512
ReadX 12951 11946 512 512
ReadX 12951 12458 512 512
ReadX 12951 2716 512 512
ReadX 12951 2717 512 512
ReadX 12951 2718 512 512
ReadX 12951 3230 512 512
ReadX 12951 2721 512 512
ReadX 12951 3233 512 512
ReadX 12951 3745 512 512
ReadX 12951 4257 512 512
ReadX 12951 4769 512 512
ReadX 12951 5281 512 512
ReadX 12951 5793 512 512
ReadX 12951 6305 512 512
ReadX 12951 6817 512 512
ReadX 12951 7329 512 512
ReadX 12951 7841 512 512
ReadX 12951 8353 512 512
ReadX 12951 8865 512 512
ReadX 12951 9377 512 512
ReadX 12951 9889 512 512
ReadX 12951 10401 512 512
ReadX 12951 10913 512 512
ReadX 12951 11425 512 512
ReadX 12951 11937 512 512
ReadX 12951 12449 512 512
ReadX 12951 12961 512 512
ReadX 12951 13473 512 512
ReadX 12951 13985 106 106
ReadX 12951 2820 406 406
ReadX 12951 3226 512 512
ReadX 12951 3738 512 512
ReadX 12951 4250 512 512
ReadX 12951 4762 512 512
ReadX 12951 5274 512 512
ReadX 12951 5786 512 512
ReadX 12951 6298 512 512
ReadX 12951 6810 512 512
ReadX 12951 7322 512 512
ReadX 12951 7834 512 512
ReadX 12951 8346 512 512
ReadX 12951 8858 512 512
ReadX 12951 9370 512 512
ReadX 12951 9882 512 512
ReadX 12951 10394 512 512
ReadX 12951 10906 512 512
ReadX 12951 11418 182 182
ReadX 12951 2717 512 512
ReadX 12951 258 512 512
ReadX 12951 470 512 512
ReadX 12951 376 512 512
ReadX 12951 888 512 512
ReadX 12951 1400 512 512
ReadX 12951 1912 512 512
ReadX 12951 2424 512 512
ReadX 12951 2936 512 512
ReadX 12951 3448 512 512
ReadX 12951 3960 424 424
ReadX 12951 362 88 88
ReadX 12951 450 512 512
ReadX 12951 962 512 512
ReadX 12951 1474 512 512
ReadX 12951 1986 512 512
ReadX 12951 2498 512 512
ReadX 12951 3010 512 512
ReadX 12951 3522 424 424
ReadX 12951 392 88 88
ReadX 12951 480 512 512
ReadX 12951 992 512 512
ReadX 12951 1504 512 512
ReadX 12951 2016 512 512
ReadX 12951 2528 512 512
ReadX 12951 3040 512 512
ReadX 12951 3552 512 512
ReadX 12951 4064 512 512
ReadX 12951 4576 512 512
ReadX 12951 5088 512 512
ReadX 12951 5600 512 512
ReadX 12951 6112 512 512
ReadX 12951 6624 512 512
ReadX 12951 7136 512 512
ReadX 12951 7648 512 512
ReadX 12951 8160 512 512
ReadX 12951 8672 512 512
ReadX 12951 9184 512 512
ReadX 12951 9696 512 512
ReadX 12951 10208 512 512
ReadX 12951 464 512 512
ReadX 12951 465 512 512
ReadX 12951 466 512 512
ReadX 12951 978 512 512
ReadX 12951 470 512 512
ReadX 12951 982 512 512
ReadX 12951 1494 512 512
ReadX 12951 2006 512 512
ReadX 12951 2518 512 512
ReadX 12951 3030 512 512
ReadX 12951 3542 512 512
ReadX 12951 4054 512 512
ReadX 12951 4566 512 512
ReadX 12951 5078 512 512
ReadX 12951 5590 512 512
ReadX 12951 6102 512 512
ReadX 12951 6614 512 512
ReadX 12951 7126 512 512
ReadX 12951 7638 512 512
ReadX 12951 8150 512 512
ReadX 12951 8662 512 512
ReadX 12951 9174 512 512
ReadX 12951 9686 512 512
ReadX 12951 10198 512 512
ReadX 12951 10710 333 333
ReadX 12951 11043 512 512
ReadX 12951 11555 179 179
ReadX 12951 11734 512 512
ReadX 12951 12246 512 512
ReadX 12951 12758 512 512
ReadX 12951 13270 512 512
ReadX 12951 13782 512 512
ReadX 12951 14294 512 512
ReadX 12951 14806 512 512
ReadX 12951 15318 512 512
ReadX 12951 15830 512 512
ReadX 12951 16342 512 512
ReadX 12951 16854 512 512
ReadX 12951 17366 512 512
ReadX 12951 17878 512 512
ReadX 12951 18390 512 512
ReadX 12951 18902 512 512
ReadX 12951 19414 512 512
ReadX 12951 19926 512 512
ReadX 12951 20438 512 512
ReadX 12951 20950 512 512
ReadX 12951 21462 512 512
ReadX 12951 21974 350 350
ReadX 12951 465 512 512
ReadX 12951 3812 512 512
ReadX 12951 4046 512 512
ReadX 12951 3828 512 512
ReadX 12951 256 512 512
ReadX 12951 260 512 512
ReadX 12951 4066 512 512
ReadX 12951 4578 512 512
ReadX 12951 5090 512 512
ReadX 12951 5602 512 512
ReadX 12951 6114 512 512
ReadX 12951 6626 512 512
ReadX 12951 7138 512 512
ReadX 12951 7650 394 394
ReadX 12951 4052 118 118
ReadX 12951 4170 512 512
ReadX 12951 4682 512 512
ReadX 12951 5194 512 512
ReadX 12951 5706 512 512
ReadX 12951 6218 512 512
ReadX 12951 6730 512 512
ReadX 12951 7242 394 394
ReadX 12951 4082 118 118
ReadX 12951 4200 512 512
ReadX 12951 4712 512 512
ReadX 12951 5224 512 512
ReadX 12951 5736 512 512
ReadX 12951 6248 512 512
ReadX 12951 6760 512 512
ReadX 12951 7272 512 512
ReadX 12951 7784 394 394
ReadX 12951 256 118 118
ReadX 12951 374 512 512
ReadX 12951 886 512 512
ReadX 12951 1398 512 512
ReadX 12951 1910 512 512
ReadX 12951 2422 512 512
ReadX 12951 2934 512 512
ReadX 12951 3446 512 512
ReadX 12951 3958 512 512
ReadX 12951 4470 512 512
ReadX 12951 4982 512 512
ReadX 12951 5494 512 512
ReadX 12951 6006 512 512
ReadX 12951 6518 512 512
ReadX 12951 7030 512 512
ReadX 12951 7542 512 512
ReadX 12951 8054 512 512
ReadX 12951 8566 512 512
ReadX 12951 9078 512 512
ReadX 12951 9590 512 512
ReadX 12951 10102 512 512
ReadX 12951 259 512 512
ReadX 12951 771 512 512
ReadX 12951 259 512 512
ReadX 12951 259 512 512
ReadX 12951 771 512 512
ReadX 12951 1283 512 512
ReadX 12951 1795 512 512
ReadX 12951 2307 512 512
ReadX 12951 2819 512 512
ReadX 12951 3331 512 512
ReadX 12951 3843 512 512
ReadX 12951 4355 512 512
ReadX 12951 4867 512 512
ReadX 12951 260 512 512
ReadX 12951 772 512 512
ReadX 12951 1284 512 512
ReadX 12951 1796 512 512
ReadX 12951 2308 512 512
ReadX 12951 2820 512 512
ReadX 12951 3332 512 512
ReadX 12951 3844 512 512
ReadX 12951 4356 512 512
ReadX 12951 4868 512 512
ReadX 12951 5380 512 512
ReadX 12951 5892 512 512
ReadX 12951 6404 512 512
ReadX 12951 6916 512 512
ReadX 12951 7428 512 512
ReadX 12951 7940 512 512
ReadX 12951 8452 512 512
ReadX 12951 8964 512 512
ReadX 12951 9476 512 512
ReadX 12951 9988 512 512
ReadX 12951 10500 378 378
ReadX 12951 10878 512 512
ReadX 12951 11390 134 134
ReadX 12951 11524 512 512
ReadX 12951 12036 512 512
ReadX 12951 12548 512 512
ReadX 12951 13060 512 512
ReadX 12951 13572 138 138
ReadX 12951 259 512 512
ReadX 12951 273 512 512
ReadX 12951 276 512 512
ReadX 12951 295 512 512
ReadX 12951 288 512 512
ReadX 12951 296 512 512
ReadX 12951 259 512 512
ReadX 12951 273 512 512
ReadX 12951 273 512 512
ReadX 12951 785 512 512
ReadX 12951 1297 512 512
ReadX 12951 1809 512 512
ReadX 12951 2321 512 512
ReadX 12951 274 512 512
ReadX 12951 274 512 512
ReadX 12951 274 497 497
ReadX 12951 272 15 15
ReadX 12951 287 512 512
ReadX 12951 799 512 512
ReadX 12951 273 512 512
ReadX 12951 785 512 512
ReadX 12951 1297 512 512
ReadX 12951 1809 512 512
ReadX 12951 2321 512 512
ReadX 12951 2833 317 317
ReadX 12951 274 195 195
ReadX 12951 469 512 512
ReadX 12951 981 512 512
ReadX 12951 1493 512 512
ReadX 12951 2005 512 512
ReadX 12951 2517 512 512
ReadX 12951 3029 512 512
ReadX 12951 3541 512 512
ReadX 12951 4053 512 512
ReadX 12951 4565 250 250
ReadX 12951 274 512 512
ReadX 12951 283 512 512
ReadX 12951 795 512 512
ReadX 12951 276 512 512
ReadX 12951 788 512 512
ReadX 12951 1300 512 512
ReadX 12951 1812 512 512
ReadX 12951 2324 512 512
ReadX 12951 2836 512 512
ReadX 12951 3348 512 512
ReadX 12951 3860 420 420
ReadX 12951 275 92 92
ReadX 12951 367 512 512
ReadX 12951 879 512 512
ReadX 12951 1391 512 512
ReadX 12951 1903 512 512
ReadX 12951 2415 512 512
ReadX 12951 2927 512 512
ReadX 12951 3439 420 420
ReadX 12951 277 92 92
ReadX 12951 369 512 512
ReadX 12951 881 512 512
ReadX 12951 1393 512 512
ReadX 12951 1905 512 512
ReadX 12951 2417 512 512
ReadX 12951 2929 512 512
ReadX 12951 3441 512 512
ReadX 12951 3953 512 512
ReadX 12951 4465 512 512
ReadX 12951 4977 512 512
ReadX 12951 5489 512 512
ReadX 12951 6001 512 512
ReadX 12951 6513 512 512
ReadX 12951 7025 512 512
ReadX 12951 7537 512 512
ReadX 12951 8049 512 512
ReadX 12951 8561 512 512
ReadX 12951 9073 512 512
ReadX 12951 9585 512 512
ReadX 12951 10097 512 512
ReadX 12951 282 512 512
ReadX 12951 794 512 512
ReadX 12951 1306 512 512
ReadX 12951 1818 512 512
ReadX 12951 2330 512 512
ReadX 12951 2842 512 512
ReadX 12951 3354 512 512
ReadX 12951 3866 512 512
ReadX 12951 4378 512 512
ReadX 12951 284 512 512
ReadX 12951 796 512 512
ReadX 12951 1308 512 512
ReadX 12951 1820 512 512
ReadX 12951 2332 512 512
ReadX 12951 2844 512 512
ReadX 12951 3356 512 512
ReadX 12951 3868 512 512
ReadX 12951 4380 512 512
ReadX 12951 4892 512 512
ReadX 12951 5404 512 512
ReadX 12951 5916 512 512
ReadX 12951 6428 512 512
ReadX 12951 6940 512 512
ReadX 12951 7452 512 512
ReadX 12951 7964 512 512
ReadX 12951 8476 512 512
ReadX 12951 8988 512 512
ReadX 12951 9500 512 512
ReadX 12951 10012 512 512
ReadX 12951 10524 472 472
ReadX 12951 288 40 40
ReadX 12951 328 512 512
ReadX 12951 840 512 512
ReadX 12951 1352 512 512
ReadX 12951 1864 512 512
ReadX 12951 2376 512 512
ReadX 12951 2888 512 512
ReadX 12951 3400 512 512
ReadX 12951 3912 512 512
ReadX 12951 4424 512 512
ReadX 12951 4936 512 512
ReadX 12951 5448 512 512
ReadX 12951 5960 512 512
ReadX 12951 6472 512 512
ReadX 12951 6984 512 512
ReadX 12951 7496 512 512
ReadX 12951 8008 512 512
ReadX 12951 8520 512 512
ReadX 12951 9032 512 512
ReadX 12951 9544 512 512
ReadX 12951 10056 512 512
ReadX 12951 10568 506 506
ReadX 12951 282 512 512
ReadX 12951 794 512 512
ReadX 12951 301 512 512
ReadX 12951 296 512 512
ReadX 12951 808 512 512
ReadX 12951 1320 512 512
ReadX 12951 1832 512 512
ReadX 12951 2344 512 512
ReadX 12951 2856 512 512
ReadX 12951 3368 512 512
ReadX 12951 3880 424 424
ReadX 12951 295 88 88
ReadX 12951 383 512 512
ReadX 12951 895 512 512
ReadX 12951 1407 512 512
ReadX 12951 1919 512 512
ReadX 12951 2431 512 512
ReadX 12951 2943 512 512
ReadX 12951 3455 424 424
ReadX 12951 297 88 88
ReadX 12951 385 512 512
ReadX 12951 897 512 512
ReadX 12951 1409 512 512
ReadX 12951 1921 512 512
ReadX 12951 2433 512 512
ReadX 12951 2945 512 512
ReadX 12951 3457 512 512
ReadX 12951 3969 512 512
ReadX 12951 4481 512 512
ReadX 12951 4993 512 512
ReadX 12951 5505 512 512
ReadX 12951 6017 512 512
ReadX 12951 6529 512 512
ReadX 12951 7041 512 512
ReadX 12951 7553 512 512
ReadX 12951 8065 512 512
ReadX 12951 8577 512 512
ReadX 12951 9089 512 512
ReadX 12951 9601 512 512
ReadX 12951 10113 512 512
ReadX 12951 301 512 512
ReadX 12951 301 512 512
ReadX 12951 301 512 512
ReadX 12951 813 512 512
ReadX 12951 301 512 512
ReadX 12951 813 512 512
ReadX 12951 1325 512 512
ReadX 12951 1837 512 512
ReadX 12951 2349 512 512
ReadX 12951 2861 512 512
ReadX 12951 3373 512 512
ReadX 12951 3885 512 512
ReadX 12951 4397 512 512
ReadX 12951 4909 512 512
ReadX 12951 5421 512 512
ReadX 12951 5933 512 512
ReadX 12951 6445 512 512
ReadX 12951 6957 512 512
ReadX 12951 7469 512 512
ReadX 12951 7981 512 512
ReadX 12951 8493 512 512
ReadX 12951 9005 512 512
ReadX 12951 9517 463 463
ReadX 12951 9980 512 512
ReadX 12951 10492 49 49
ReadX 12951 10541 512 512
ReadX 12951 11053 512 512
ReadX 12951 11565 512 512
ReadX 12951 12077 512 512
ReadX 12951 12589 512 512
ReadX 12951 13101 512 512
ReadX 12951 13613 512 512
ReadX 12951 14125 512 512
ReadX 12951 14637 512 512
ReadX 12951 15149 512 512
ReadX 12951 15661 512 512
ReadX 12951 16173 512 512
ReadX 12951 16685 512 512
ReadX 12951 17197 512 512
ReadX 12951 17709 512 512
ReadX 12951 18221 512 512
ReadX 12951 18733 512 512
ReadX 12951 19245 512 512
ReadX 12951 19757 512 512
ReadX 12951 20269 512 512
ReadX 12951 20781 326 326
ReadX 12951 301 512 512
QUERY_FS_INFORMATION 259
Close 12949
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12952
Close 12952
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12953
ReadX 12953 0 24 24
Close 12953
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12954
QUERY_FILE_INFORMATION 12954
ReadX 12954 0 512 512
ReadX 12954 476 512 512
ReadX 12954 510 512 512
ReadX 12954 484 512 512
ReadX 12954 474 512 512
ReadX 12954 478 512 512
ReadX 12954 990 512 512
ReadX 12954 509 57 57
Close 12954
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12955
QUERY_FILE_INFORMATION 12955
ReadX 12955 0 512 512
ReadX 12955 476 512 512
ReadX 12955 510 512 512
ReadX 12955 484 512 512
ReadX 12955 480 512 512
ReadX 12955 474 512 512
ReadX 12955 478 512 512
QUERY_FILE_INFORMATION 12955
WriteX 12955 494 60 60
WriteX 12955 494 4 4
QUERY_FILE_INFORMATION 12955
WriteX 12955 494 11 11
WriteX 12955 510 512 512
WriteX 12955 484 512 512
WriteX 12955 474 512 512
WriteX 12955 478 512 512
WriteX 12955 990 512 512
Close 12955
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP 0x40 0x2 12956
Close 12956
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x200000 0x1 12957
Close 12957
Rename \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 12959
WriteX 12959 4607 1 1
QUERY_FILE_INFORMATION 12959
WriteX 12959 0 65471 65471
WriteX 12959 65471 65 65
WriteX 12959 65536 19490 19490
Close 12959
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12960
QUERY_FILE_INFORMATION 12960
ReadX 12960 0 512 512
ReadX 12960 482 512 512
ReadX 12960 994 512 512
ReadX 12960 1506 512 512
ReadX 12960 480 512 512
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
WriteX 12960 490 448 448
QUERY_FILE_INFORMATION 12960
WriteX 12960 490 60 60
WriteX 12960 490 4 4
QUERY_FILE_INFORMATION 12960
WriteX 12960 490 11 11
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
WriteX 12960 484 512 512
WriteX 12960 996 512 512
WriteX 12960 1508 512 512
WriteX 12960 482 512 512
WriteX 12960 0 512 512
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
ReadX 12960 490 512 512
WriteX 12960 502 512 512
WriteX 12960 502 292 292
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
WriteX 12960 503 20 20
WriteX 12960 503 108 108
QUERY_FILE_INFORMATION 12960
WriteX 12960 504 448 448
QUERY_FILE_INFORMATION 12960
WriteX 12960 504 44 44
WriteX 12960 504 20 20
WriteX 12960 500 512 512
WriteX 12960 492 512 512
WriteX 12960 496 512 512
WriteX 12960 1008 512 512
WriteX 12960 494 512 512
Flush 12960
WriteX 12960 0 512 512
Flush 12960
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
WriteX 12960 500 512 512
WriteX 12960 492 512 512
WriteX 12960 496 512 512
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
WriteX 12960 518 320 320
QUERY_FILE_INFORMATION 12960
WriteX 12960 518 60 60
ReadX 12960 504 512 512
WriteX 12960 522 512 512
WriteX 12960 506 3204 3204
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
WriteX 12960 519 25 25
WriteX 12960 518 103 103
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
WriteX 12960 519 44 44
WriteX 12960 519 20 20
WriteX 12960 520 512 512
WriteX 12960 482 512 512
WriteX 12960 486 512 512
WriteX 12960 998 512 512
WriteX 12960 484 512 512
WriteX 12960 490 512 512
Flush 12960
WriteX 12960 0 512 512
Flush 12960
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
QUERY_FILE_INFORMATION 12960
WriteX 12960 519 7 7
WriteX 12960 519 57 57
WriteX 12960 520 512 512
WriteX 12960 492 512 512
WriteX 12960 482 512 512
WriteX 12960 486 512 512
WriteX 12960 998 512 512
Flush 12960
WriteX 12960 520 512 512
Flush 12960
Close 12960
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12961
Close 12961
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 12962
QUERY_FILE_INFORMATION 12962
ReadX 12962 0 512 512
ReadX 12962 490 512 512
ReadX 12962 484 512 512
ReadX 12962 520 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP 0x40 0x1 12963
Close 12963
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC112.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 12962
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TIPS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TIPS.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12964
Close 12964
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12965
ReadX 12965 0 24 24
Close 12965
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12966
QUERY_FILE_INFORMATION 12966
ReadX 12966 0 512 512
ReadX 12966 366 512 512
ReadX 12966 878 512 512
ReadX 12966 1390 512 512
ReadX 12966 1902 512 512
ReadX 12966 374 57 57
Close 12966
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12967
QUERY_FILE_INFORMATION 12967
ReadX 12967 0 512 512
ReadX 12967 366 512 512
ReadX 12967 878 512 512
ReadX 12967 1390 512 512
ReadX 12967 1902 512 512
QUERY_FILE_INFORMATION 12967
WriteX 12967 374 60 60
WriteX 12967 374 4 4
QUERY_FILE_INFORMATION 12967
WriteX 12967 374 11 11
ReadX 12967 374 57 57
ReadX 12967 374 57 57
ReadX 12967 292 4096 4096
ReadX 12967 364 512 512
ReadX 12967 512 4096 4096
ReadX 12967 4608 4096 4096
ReadX 12967 8704 4096 4096
ReadX 12967 12800 4096 4096
ReadX 12967 16896 4096 4096
ReadX 12967 20992 4096 4096
ReadX 12967 25088 4096 4096
ReadX 12967 29184 4096 4096
ReadX 12967 33280 4096 4096
ReadX 12967 37376 4096 4096
ReadX 12967 41472 4096 4096
ReadX 12967 45568 4096 4096
ReadX 12967 49664 4096 4096
ReadX 12967 53760 4096 4096
ReadX 12967 57856 4096 4096
ReadX 12967 61952 4096 4096
ReadX 12967 66048 4096 4096
ReadX 12967 70144 4096 4096
ReadX 12967 74240 162 162
ReadX 12967 308 4096 4096
ReadX 12967 4404 4096 4096
WriteX 12967 368 512 512
WriteX 12967 880 512 512
WriteX 12967 1392 512 512
Close 12967
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12968
Close 12968
NTCreateX \clients\client1\~dmtmp\PWRPNT\TIPS.PPT 0x40 0x1 12969
QUERY_FILE_INFORMATION 12969
ReadX 12969 0 512 512
ReadX 12969 366 512 512
ReadX 12969 878 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 12970
Close 12970
Unlink \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 12969
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 12972
WriteX 12972 4607 1 1
QUERY_FILE_INFORMATION 12972
WriteX 12972 0 65471 65471
WriteX 12972 65471 65 65
WriteX 12972 65536 8866 8866
Close 12972
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12973
QUERY_FILE_INFORMATION 12973
ReadX 12973 0 512 512
ReadX 12973 366 512 512
ReadX 12973 878 512 512
ReadX 12973 1390 512 512
ReadX 12973 364 512 512
QUERY_FILE_INFORMATION 12973
QUERY_FILE_INFORMATION 12973
QUERY_FILE_INFORMATION 12973
WriteX 12973 374 448 448
QUERY_FILE_INFORMATION 12973
WriteX 12973 374 60 60
WriteX 12973 374 4 4
QUERY_FILE_INFORMATION 12973
WriteX 12973 374 11 11
QUERY_FILE_INFORMATION 12973
QUERY_FILE_INFORMATION 12973
WriteX 12973 374 7 7
WriteX 12973 374 57 57
WriteX 12973 368 512 512
WriteX 12973 880 512 512
WriteX 12973 1392 512 512
WriteX 12973 366 512 512
WriteX 12973 0 512 512
Flush 12973
WriteX 12973 368 512 512
Flush 12973
Close 12973
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12974
QUERY_FILE_INFORMATION 12974
ReadX 12974 0 512 512
ReadX 12974 366 512 512
ReadX 12974 878 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 12974
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12975
Close 12975
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12976
ReadX 12976 0 24 24
Close 12976
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12977
QUERY_FILE_INFORMATION 12977
ReadX 12977 0 512 512
ReadX 12977 366 512 512
ReadX 12977 878 512 512
ReadX 12977 1390 512 512
ReadX 12977 1902 512 512
ReadX 12977 374 57 57
Close 12977
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12978
QUERY_FILE_INFORMATION 12978
ReadX 12978 0 512 512
ReadX 12978 366 512 512
ReadX 12978 878 512 512
ReadX 12978 1390 512 512
ReadX 12978 1902 512 512
QUERY_FILE_INFORMATION 12978
WriteX 12978 374 60 60
WriteX 12978 374 4 4
QUERY_FILE_INFORMATION 12978
WriteX 12978 374 11 11
WriteX 12978 368 512 512
WriteX 12978 880 512 512
WriteX 12978 1392 512 512
Close 12978
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP 0x40 0x2 12979
Close 12979
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x200000 0x1 12980
Close 12980
Rename \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 12982
WriteX 12982 4607 1 1
QUERY_FILE_INFORMATION 12982
WriteX 12982 0 65471 65471
WriteX 12982 65471 65 65
WriteX 12982 65536 9298 9298
Close 12982
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12983
QUERY_FILE_INFORMATION 12983
ReadX 12983 0 512 512
ReadX 12983 368 512 512
ReadX 12983 880 512 512
ReadX 12983 1392 512 512
ReadX 12983 366 512 512
QUERY_FILE_INFORMATION 12983
QUERY_FILE_INFORMATION 12983
QUERY_FILE_INFORMATION 12983
WriteX 12983 376 448 448
QUERY_FILE_INFORMATION 12983
WriteX 12983 376 60 60
WriteX 12983 376 4 4
QUERY_FILE_INFORMATION 12983
WriteX 12983 376 11 11
QUERY_FILE_INFORMATION 12983
QUERY_FILE_INFORMATION 12983
WriteX 12983 376 7 7
WriteX 12983 376 57 57
WriteX 12983 370 512 512
WriteX 12983 882 512 512
WriteX 12983 1394 512 512
WriteX 12983 368 512 512
WriteX 12983 0 512 512
Flush 12983
WriteX 12983 370 512 512
Flush 12983
Close 12983
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12984
Close 12984
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12985
QUERY_FILE_INFORMATION 12985
ReadX 12985 0 512 512
ReadX 12985 368 512 512
ReadX 12985 880 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP 0x40 0x1 12986
Close 12986
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC241.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\Designs 1
NTCreateX \clients\client1\~dmtmp\Designs 0x40 0x1 -1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TRIDOTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT 1
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 12988
Close 12988
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 12989
ReadX 12989 0 24 24
Close 12989
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 12990
QUERY_FILE_INFORMATION 12990
ReadX 12990 0 512 512
ReadX 12990 512 512 512
ReadX 12990 1024 512 512
ReadX 12990 2016 512 512
ReadX 12990 1056 512 512
ReadX 12990 1096 57 57
Close 12990
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT 0x40 0x1 12991
QUERY_FILE_INFORMATION 12991
ReadX 12991 0 512 512
ReadX 12991 512 512 512
ReadX 12991 1024 512 512
ReadX 12991 2016 512 512
ReadX 12991 1056 512 512
ReadX 12991 1096 57 57
ReadX 12991 1096 57 57
ReadX 12991 1088 62 62
ReadX 12991 1536 4096 4096
ReadX 12991 5632 4096 4096
ReadX 12991 9728 4096 4096
ReadX 12991 13824 2859 2859
ReadX 12991 1120 28 28
ReadX 12991 1148 20 20
ReadX 12991 1168 8 8
ReadX 12991 1176 88 88
ReadX 12991 1264 8 8
ReadX 12991 1272 4 4
ReadX 12991 1276 4 4
ReadX 12991 1280 1 1
ReadX 12991 1130 4 4
ReadX 12991 1134 4 4
ReadX 12991 1138 1 1
ReadX 12991 1131 4 4
ReadX 12991 1135 4 4
ReadX 12991 1139 1 1
ReadX 12991 1131 4 4
ReadX 12991 1135 4 4
ReadX 12991 1139 2 2
ReadX 12991 1132 4 4
ReadX 12991 1136 4 4
ReadX 12991 1140 25 25
ReadX 12991 1134 4 4
ReadX 12991 1138 8 8
ReadX 12991 1146 4 4
ReadX 12991 1150 8 8
ReadX 12991 1158 4 4
ReadX 12991 1162 8 8
ReadX 12991 1170 4 4
ReadX 12991 1174 4 4
ReadX 12991 1178 4 4
ReadX 12991 1182 4 4
ReadX 12991 1186 4 4
ReadX 12991 1190 4 4
ReadX 12991 1194 13900 13900
ReadX 12991 2048 4096 4096
Close 12991
QUERY_FS_INFORMATION 259
Close 12985
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12992
Close 12992
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12993
ReadX 12993 0 24 24
Close 12993
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12994
QUERY_FILE_INFORMATION 12994
ReadX 12994 0 512 512
ReadX 12994 368 512 512
ReadX 12994 880 512 512
ReadX 12994 1392 512 512
ReadX 12994 1904 512 512
ReadX 12994 376 57 57
Close 12994
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 12995
QUERY_FILE_INFORMATION 12995
ReadX 12995 0 512 512
ReadX 12995 368 512 512
ReadX 12995 880 512 512
ReadX 12995 1392 512 512
ReadX 12995 1904 512 512
QUERY_FILE_INFORMATION 12995
WriteX 12995 376 60 60
WriteX 12995 376 4 4
QUERY_FILE_INFORMATION 12995
WriteX 12995 376 11 11
WriteX 12995 370 512 512
WriteX 12995 882 512 512
WriteX 12995 1394 512 512
Close 12995
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP 0x40 0x2 12996
Close 12996
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x200000 0x1 12997
Close 12997
Rename \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x2 12999
WriteX 12999 4607 1 1
QUERY_FILE_INFORMATION 12999
WriteX 12999 0 65471 65471
WriteX 12999 65471 65 65
WriteX 12999 65536 11540 11540
Close 12999
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13000
QUERY_FILE_INFORMATION 13000
ReadX 13000 0 512 512
ReadX 13000 398 512 512
ReadX 13000 910 512 512
ReadX 13000 1422 512 512
ReadX 13000 396 512 512
QUERY_FILE_INFORMATION 13000
QUERY_FILE_INFORMATION 13000
QUERY_FILE_INFORMATION 13000
WriteX 13000 406 448 448
QUERY_FILE_INFORMATION 13000
WriteX 13000 406 60 60
WriteX 13000 406 4 4
QUERY_FILE_INFORMATION 13000
WriteX 13000 406 11 11
QUERY_FILE_INFORMATION 13000
QUERY_FILE_INFORMATION 13000
WriteX 13000 406 7 7
WriteX 13000 406 57 57
WriteX 13000 400 512 512
WriteX 13000 912 512 512
WriteX 13000 1424 512 512
WriteX 13000 398 512 512
WriteX 13000 0 512 512
Flush 13000
WriteX 13000 400 512 512
Flush 13000
Close 13000
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13001
Close 13001
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT 0x40 0x1 13002
QUERY_FILE_INFORMATION 13002
ReadX 13002 0 512 512
ReadX 13002 398 512 512
ReadX 13002 910 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP 0x40 0x1 13003
Close 13003
Unlink \clients\client1\~dmtmp\PWRPNT\PPTC321.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 13002
ReadX 12951 1434 512 512
Close 12951
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13004
WriteX 13004 0 65471 65471
WriteX 13004 65471 63 63
WriteX 13004 65534 65471 65471
WriteX 13004 131005 63 63
Close 13004
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13005
WriteX 13005 0 65471 65471
WriteX 13005 65471 63 63
WriteX 13005 65534 65471 65471
WriteX 13005 131005 63 63
WriteX 13005 131068 65471 65471
WriteX 13005 196539 63 63
WriteX 13005 196602 65471 65471
WriteX 13005 262073 63 63
Close 13005
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13006
WriteX 13006 0 65471 65471
WriteX 13006 65471 63 63
WriteX 13006 65534 65471 65471
WriteX 13006 131005 63 63
WriteX 13006 131068 65471 65471
WriteX 13006 196539 63 63
WriteX 13006 196602 65471 65471
WriteX 13006 262073 63 63
WriteX 13006 262136 65471 65471
WriteX 13006 327607 63 63
WriteX 13006 327670 65471 65471
WriteX 13006 393141 63 63
WriteX 13006 393204 65471 65471
WriteX 13006 458675 63 63
WriteX 13006 458738 65471 65471
WriteX 13006 524209 63 63
Close 13006
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 13007
Close 13007
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CDRROLS.CFG
NTCreateX \clients\client1\~dmtmp\COREL\CDRROLS.CFG 0x40 0x1 13008
ReadX 13008 0 512 512
ReadX 13008 512 511 511
ReadX 13008 1023 512 512
ReadX 13008 1535 512 512
Close 13008
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CDRBARS.CFG
NTCreateX \clients\client1\~dmtmp\COREL\CDRBARS.CFG 0x40 0x1 13009
ReadX 13009 0 512 512
ReadX 13009 512 510 510
ReadX 13009 1022 512 512
ReadX 13009 1534 510 510
ReadX 13009 2044 510 510
Close 13009
NTCreateX \clients\client1\~dmtmp\COREL\ARTISTIC.ACL 0x40 0x1 13010
ReadX 13010 0 512 512
ReadX 13010 512 512 512
ReadX 13010 1024 512 512
ReadX 13010 1536 512 512
ReadX 13010 2048 512 512
ReadX 13010 2560 512 512
ReadX 13010 3072 512 512
ReadX 13010 3584 512 512
ReadX 13010 4096 512 512
ReadX 13010 4608 512 512
ReadX 13010 5120 512 512
ReadX 13010 5632 512 512
ReadX 13010 6144 512 512
ReadX 13010 6656 512 512
ReadX 13010 7168 512 512
ReadX 13010 7680 512 512
ReadX 13010 8192 512 512
ReadX 13010 8704 512 512
Close 13010
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CDRMENU.CFG 1
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 13011
Close 13011
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\CORELDRW.CDT
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13012
QUERY_FILE_INFORMATION 13012
Close 13012
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13013
ReadX 13013 0 8192 8192
Close 13013
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 13014
Close 13014
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 13015
QUERY_FILE_INFORMATION 13015
Close 13015
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 13016
ReadX 13016 0 8192 8192
Close 13016
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 13017
Close 13017
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13018
QUERY_FILE_INFORMATION 13018
Close 13018
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13019
ReadX 13019 0 8192 8192
Close 13019
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC1.CDR 0x40 0x1 13020
ReadX 13020 0 8192 8192
ReadX 13020 8192 8192 8192
ReadX 13020 16384 8192 8192
ReadX 13020 24576 8192 8192
Close 13020
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x2 13022
Close 13022
Unlink \clients\client1\~dmtmp\COREL\GRAPH1.CDR
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x2 13024
WriteX 13024 8191 1 1
QUERY_FILE_INFORMATION 13024
WriteX 13024 0 10438 10438
Close 13024
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\MAILBOX2.CPT
NTCreateX \clients\client1\~dmtmp\COREL\MAILBOX2.CPT 0x40 0x1 13025
Close 13025
NTCreateX \clients\client1\~dmtmp\COREL\MAILBOX2.CPT 0x40 0x1 13026
QUERY_FILE_INFORMATION 13026
QUERY_FILE_INFORMATION 13026
Close 13026
NTCreateX \clients\client1\~dmtmp\COREL\MAILBOX2.CPT 0x40 0x1 13027
QUERY_FILE_INFORMATION 13027
QUERY_FILE_INFORMATION 13027
Close 13027
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\TEAPOT2.CPT
NTCreateX \clients\client1\~dmtmp\COREL\TEAPOT2.CPT 0x40 0x1 13028
Close 13028
NTCreateX \clients\client1\~dmtmp\COREL\TEAPOT2.CPT 0x40 0x1 13029
QUERY_FILE_INFORMATION 13029
QUERY_FILE_INFORMATION 13029
Close 13029
NTCreateX \clients\client1\~dmtmp\COREL\TEAPOT2.CPT 0x40 0x1 13030
QUERY_FILE_INFORMATION 13030
QUERY_FILE_INFORMATION 13030
Close 13030
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\SIGN2.CPT
NTCreateX \clients\client1\~dmtmp\COREL\SIGN2.CPT 0x40 0x1 13031
Close 13031
NTCreateX \clients\client1\~dmtmp\COREL\SIGN2.CPT 0x40 0x1 13032
QUERY_FILE_INFORMATION 13032
QUERY_FILE_INFORMATION 13032
Close 13032
NTCreateX \clients\client1\~dmtmp\COREL\SIGN2.CPT 0x40 0x1 13033
QUERY_FILE_INFORMATION 13033
QUERY_FILE_INFORMATION 13033
Close 13033
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\TRAIN.CDR
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 13034
Close 13034
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 13035
QUERY_FILE_INFORMATION 13035
QUERY_FILE_INFORMATION 13035
Close 13035
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 13036
ReadX 13036 0 8 8
ReadX 13036 8 4 4
ReadX 13036 12 8 8
ReadX 13036 22 8 8
ReadX 13036 520 8 8
ReadX 13036 525 8 8
ReadX 13036 533 4 4
ReadX 13036 543 8 8
ReadX 13036 551 4 4
ReadX 13036 1058 8 8
ReadX 13036 1066 4 4
ReadX 13036 1081 8 8
ReadX 13036 1089 4 4
ReadX 13036 660 8 8
Close 13036
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 13037
ReadX 13037 0 8192 8192
Close 13037
NTCreateX \clients\client1\~dmtmp\COREL\TRAIN.CDR 0x40 0x1 13038
ReadX 13038 0 8192 8192
ReadX 13038 520 8192 8192
ReadX 13038 8712 8192 8192
ReadX 13038 16904 8192 8192
ReadX 13038 25096 8192 8192
ReadX 13038 33288 8192 8192
ReadX 13038 41480 8192 8192
ReadX 13038 49672 8192 8192
ReadX 13038 57864 8192 8192
ReadX 13038 66056 8192 8192
ReadX 13038 74248 8192 8192
ReadX 13038 82440 8192 8192
ReadX 13038 90632 8192 8192
ReadX 13038 98824 8192 8192
ReadX 13038 107016 8192 8192
ReadX 13038 115208 8192 8192
ReadX 13038 123400 8192 8192
ReadX 13038 131592 8192 8192
ReadX 13038 139784 8192 8192
ReadX 13038 147976 8192 8192
ReadX 13038 156168 8192 8192
Close 13038
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 13039
QUERY_FILE_INFORMATION 13039
Close 13039
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x200000 0x1 13040
Close 13040
Rename \clients\client1\~dmtmp\COREL\GRAPH1.CDR \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH1.CDR 0x40 0x2 13042
WriteX 13042 8191 1 1
QUERY_FILE_INFORMATION 13042
WriteX 13042 0 28489 28489
Close 13042
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.BAK 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x200000 0x1 13043
Close 13043
Rename \clients\client1\~dmtmp\COREL\@@@CDRW.TMP \clients\client1\~dmtmp\COREL\GRAPH1.BAK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 13044
Close 13044
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 13045
QUERY_FILE_INFORMATION 13045
Close 13045
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 13046
ReadX 13046 0 8192 8192
Close 13046
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 13047
Close 13047
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13048
QUERY_FILE_INFORMATION 13048
Close 13048
NTCreateX \clients\client1\~dmtmp\COREL\CORELDRW.CDT 0x40 0x1 13049
ReadX 13049 0 8192 8192
Close 13049
NTCreateX \clients\client1\~dmtmp\COREL\GRAPHIC2.CDR 0x40 0x1 13050
ReadX 13050 0 8192 8192
ReadX 13050 8192 8192 8192
ReadX 13050 16384 8192 8192
ReadX 13050 24576 8192 8192
ReadX 13050 32768 16384 16384
ReadX 13050 49152 8192 8192
ReadX 13050 57344 8192 8192
ReadX 13050 65536 8192 8192
Close 13050
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x2 13052
Close 13052
Unlink \clients\client1\~dmtmp\COREL\GRAPH2.CDR
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x2 13054
WriteX 13054 8191 1 1
QUERY_FILE_INFORMATION 13054
WriteX 13054 0 29253 29253
Close 13054
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\ROSE.CPT
NTCreateX \clients\client1\~dmtmp\COREL\ROSE.CPT 0x40 0x1 13055
Close 13055
NTCreateX \clients\client1\~dmtmp\COREL\ROSE.CPT 0x40 0x1 13056
QUERY_FILE_INFORMATION 13056
QUERY_FILE_INFORMATION 13056
Close 13056
NTCreateX \clients\client1\~dmtmp\COREL\ROSE.CPT 0x40 0x1 13057
QUERY_FILE_INFORMATION 13057
QUERY_FILE_INFORMATION 13057
Close 13057
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 13058
QUERY_FILE_INFORMATION 13058
Close 13058
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x200000 0x1 13059
Close 13059
Rename \clients\client1\~dmtmp\COREL\GRAPH2.CDR \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\COREL\GRAPH2.CDR 0x40 0x2 13061
WriteX 13061 8191 1 1
QUERY_FILE_INFORMATION 13061
WriteX 13061 0 30183 30183
Close 13061
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.BAK 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x200000 0x1 13062
Close 13062
Rename \clients\client1\~dmtmp\COREL\@@@CDRW.TMP \clients\client1\~dmtmp\COREL\GRAPH2.BAK
NTCreateX \clients\client1\~dmtmp\COREL\CDRBARS.CFG 0x40 0x1 13063
WriteX 13063 0 510 510
WriteX 13063 510 512 512
WriteX 13063 1022 510 510
WriteX 13063 1532 510 510
WriteX 13063 2042 168 168
Close 13063
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 1
NTCreateX \clients\client1\~dmtmp\COREL\@@@CDRW.TMP 0x40 0x2 13064
Close 13064
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
Unlink \clients\client1\~dmtmp\COREL\@@@CDRW.TMP
NTCreateX \clients\client1\~dmtmp\COREL\CDRROLS.CFG 0x40 0x1 13065
WriteX 13065 0 511 511
WriteX 13065 511 512 512
WriteX 13065 1023 512 512
WriteX 13065 1535 488 488
Close 13065
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13066
ReadX 13066 0 65471 65471
ReadX 13066 65471 63 63
ReadX 13066 65534 65471 65471
ReadX 13066 131005 63 63
ReadX 13066 131068 65471 65471
ReadX 13066 196539 63 63
ReadX 13066 196602 65471 65471
ReadX 13066 262073 63 63
ReadX 13066 262136 65471 65471
ReadX 13066 327607 63 63
ReadX 13066 327670 10 10
Close 13066
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13067
ReadX 13067 0 65471 65471
ReadX 13067 65471 63 63
ReadX 13067 65534 65471 65471
ReadX 13067 131005 63 63
ReadX 13067 131068 65471 65471
ReadX 13067 196539 63 63
ReadX 13067 196602 65471 65471
ReadX 13067 262073 63 63
ReadX 13067 262136 65471 65471
ReadX 13067 327607 63 63
ReadX 13067 327670 65471 65471
ReadX 13067 393141 63 63
ReadX 13067 393204 65471 65471
ReadX 13067 458675 63 63
ReadX 13067 458738 65471 65471
ReadX 13067 524209 63 63
ReadX 13067 524272 65471 65471
ReadX 13067 589743 63 63
ReadX 13067 589806 65471 65471
ReadX 13067 655277 63 63
ReadX 13067 655340 32 32
Close 13067
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13068
ReadX 13068 0 65471 65471
ReadX 13068 65471 63 63
ReadX 13068 65534 65471 65471
ReadX 13068 131005 63 63
ReadX 13068 131068 65471 65471
ReadX 13068 196539 63 63
ReadX 13068 196602 65471 65471
ReadX 13068 262073 63 63
ReadX 13068 262136 65471 65471
ReadX 13068 327607 63 63
ReadX 13068 327670 65471 65471
ReadX 13068 393141 63 63
ReadX 13068 393204 65471 65471
ReadX 13068 458675 63 63
ReadX 13068 458738 65471 65471
ReadX 13068 524209 63 63
ReadX 13068 524272 65471 65471
ReadX 13068 589743 63 63
ReadX 13068 589806 65471 65471
ReadX 13068 655277 63 63
ReadX 13068 655340 65471 65471
ReadX 13068 720811 63 63
ReadX 13068 720874 65471 65471
ReadX 13068 786345 63 63
ReadX 13068 786408 65471 65471
ReadX 13068 851879 63 63
ReadX 13068 851942 65471 65471
ReadX 13068 917413 63 63
ReadX 13068 917476 65471 65471
ReadX 13068 982947 63 63
ReadX 13068 983010 65471 65471
ReadX 13068 1048481 63 63
ReadX 13068 1048544 65471 65471
ReadX 13068 1114015 63 63
ReadX 13068 1114078 65471 65471
ReadX 13068 1179549 63 63
ReadX 13068 1179612 65471 65471
ReadX 13068 1245083 63 63
ReadX 13068 1245146 65471 65471
ReadX 13068 1310617 63 63
ReadX 13068 1310680 65471 65471
ReadX 13068 1376151 63 63
ReadX 13068 1376214 65471 65471
ReadX 13068 1441685 63 63
ReadX 13068 1441748 65471 65471
ReadX 13068 1507219 63 63
ReadX 13068 1507282 65471 65471
ReadX 13068 1572753 63 63
ReadX 13068 1572816 65471 65471
ReadX 13068 1638287 63 63
ReadX 13068 1638350 65471 65471
ReadX 13068 1703821 63 63
ReadX 13068 1703884 65471 65471
ReadX 13068 1769355 63 63
ReadX 13068 1769418 65471 65471
ReadX 13068 1834889 63 63
ReadX 13068 1834952 32824 32824
Close 13068
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW 1
NTCreateX \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS 0x40 0x1 13069
QUERY_FILE_INFORMATION 13069
ReadX 13069 0 512 512
ReadX 13069 512 512 512
ReadX 13069 1024 512 512
QUERY_FILE_INFORMATION 13069
QUERY_FILE_INFORMATION 13069
ReadX 13069 512 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FILE_INFORMATION 13069
QUERY_FILE_INFORMATION 13069
ReadX 13069 512 4096 4096
QUERY_FILE_INFORMATION 13069
QUERY_FILE_INFORMATION 13069
QUERY_FILE_INFORMATION 13069
WriteX 13069 512 4096 4096
WriteX 13069 1024 512 512
ReadX 13069 502 512 512
QUERY_FILE_INFORMATION 13069
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13069 2560 512 512
ReadX 13069 1536 512 512
ReadX 13069 2176 384 384
ReadX 13069 3072 128 128
ReadX 13069 3107 512 512
ReadX 13069 3619 512 512
ReadX 13069 4131 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13069 286 123 123
ReadX 13069 292 24 24
ReadX 13069 512 2048 2048
ReadX 13069 512 2048 2048
ReadX 13069 2560 2048 2048
ReadX 13069 416 1536 1536
ReadX 13069 768 512 512
ReadX 13069 1280 2048 2048
ReadX 13069 3328 2048 2048
ReadX 13069 5376 2048 2048
ReadX 13069 7424 2048 2048
ReadX 13069 9472 2048 2048
ReadX 13069 11520 2048 2048
ReadX 13069 13568 2048 2048
ReadX 13069 15616 2048 2048
ReadX 13069 17664 2048 2048
ReadX 13069 19712 2048 2048
ReadX 13069 21760 2048 2048
ReadX 13069 23808 2048 2048
ReadX 13069 25856 2048 2048
ReadX 13069 27904 2048 2048
ReadX 13069 29952 2048 2048
ReadX 13069 32000 2048 2048
ReadX 13069 34048 2048 2048
ReadX 13069 36096 2048 2048
ReadX 13069 38144 2048 2048
ReadX 13069 40192 2048 2048
ReadX 13069 42240 512 512
ReadX 13069 42752 2048 2048
ReadX 13069 44800 2048 2048
ReadX 13069 46848 2048 2048
ReadX 13069 48896 2048 2048
ReadX 13069 50944 2048 2048
ReadX 13069 52992 2048 2048
ReadX 13069 55040 2048 2048
ReadX 13069 57088 2048 2048
ReadX 13069 316 2048 2048
ReadX 13069 2364 2048 2048
ReadX 13069 4412 2048 2048
ReadX 13069 6460 2048 2048
ReadX 13069 8508 2048 2048
ReadX 13069 10556 2048 2048
ReadX 13069 12604 2048 2048
ReadX 13069 14652 2048 2048
ReadX 13069 16700 2048 2048
ReadX 13069 18748 2048 2048
ReadX 13069 20796 2048 2048
ReadX 13069 22844 2048 2048
ReadX 13069 24892 2048 2048
ReadX 13069 26940 2048 2048
ReadX 13069 28988 2048 2048
ReadX 13069 31036 2048 2048
ReadX 13069 436 2048 2048
ReadX 13069 2484 2048 2048
ReadX 13069 4532 2048 2048
ReadX 13069 6580 2048 2048
ReadX 13069 8628 2048 2048
ReadX 13069 10676 2048 2048
ReadX 13069 476 2048 2048
ReadX 13069 476 2048 2048
ReadX 13069 476 2048 2048
ReadX 13069 2524 2048 2048
ReadX 13069 484 2048 2048
ReadX 13069 484 2048 2048
ReadX 13069 484 2048 2048
ReadX 13069 2532 665 665
ReadX 13069 492 665 665
ReadX 13069 492 665 665
ReadX 13069 492 665 665
ReadX 13069 296 512 512
ReadX 13069 318 512 512
ReadX 13069 300 512 512
ReadX 13069 312 512 512
ReadX 13069 320 512 512
ReadX 13069 832 354 354
ReadX 13069 504 4096 4096
ReadX 13069 496 1428 1428
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x2 13070
Close 13070
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\5D7C0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\5D7C0000 0x40 0x2 13071
WriteX 13071 1535 1 1
QUERY_FILE_INFORMATION 13071
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13069 296 1251 1251
ReadX 13069 2176 384 384
ReadX 13069 3072 1634 1634
QUERY_FILE_INFORMATION 13071
WriteX 13071 0 57088 57088
WriteX 13071 0 4096 4096
Flush 13071
Close 13069
NTCreateX \clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS 0x40 0x1 13072
Close 13072
WriteX 13071 0 4096 4096
Close 13071
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\5D7C0000
NTCreateX \clients\client1\~dmtmp\EXCEL\5D7C0000 0x200000 0x1 13073
Close 13073
Rename \clients\client1\~dmtmp\EXCEL\5D7C0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 13074
QUERY_FILE_INFORMATION 13074
ReadX 13074 0 512 512
ReadX 13074 512 512 512
ReadX 13074 1024 512 512
QUERY_FILE_INFORMATION 13074
QUERY_FILE_INFORMATION 13074
ReadX 13074 512 2048 2048
QUERY_FILE_INFORMATION 13074
QUERY_FILE_INFORMATION 13074
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13074 4096 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\0BBC0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\0BBC0000 0x40 0x2 13075
WriteX 13075 1535 1 1
QUERY_FILE_INFORMATION 13075
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13074 1536 512 512
ReadX 13074 288 1251 1251
ReadX 13074 2048 2018 2018
QUERY_FILE_INFORMATION 13075
WriteX 13075 0 51456 51456
WriteX 13075 0 4096 4096
Flush 13075
QUERY_FILE_INFORMATION 13074
QUERY_FILE_INFORMATION 13074
Close 13074
WriteX 13075 0 4096 4096
Close 13075
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\0BBC0000
NTCreateX \clients\client1\~dmtmp\EXCEL\0BBC0000 0x200000 0x1 13076
Close 13076
Rename \clients\client1\~dmtmp\EXCEL\0BBC0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 13077
QUERY_FILE_INFORMATION 13077
ReadX 13077 0 512 512
ReadX 13077 512 512 512
ReadX 13077 1024 512 512
QUERY_FILE_INFORMATION 13077
QUERY_FILE_INFORMATION 13077
ReadX 13077 512 2048 2048
QUERY_FILE_INFORMATION 13077
QUERY_FILE_INFORMATION 13077
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13077 4096 512 512
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x2 13079
Close 13079
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN 0x40 0x2 13081
WriteX 13081 4045 1 1
QUERY_FILE_INFORMATION 13081
WriteX 13081 0 53077 53077
Close 13081
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\51EC0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\51EC0000 0x40 0x2 13082
WriteX 13082 1535 1 1
QUERY_FILE_INFORMATION 13082
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13077 1536 512 512
ReadX 13077 288 1251 1251
ReadX 13077 2048 2018 2018
QUERY_FILE_INFORMATION 13082
WriteX 13082 0 65471 65471
WriteX 13082 65471 65 65
WriteX 13082 65536 1856 1856
WriteX 13082 0 4096 4096
Flush 13082
QUERY_FILE_INFORMATION 13077
QUERY_FILE_INFORMATION 13077
Close 13077
WriteX 13082 0 4096 4096
Close 13082
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\51EC0000
NTCreateX \clients\client1\~dmtmp\EXCEL\51EC0000 0x200000 0x1 13083
Close 13083
Rename \clients\client1\~dmtmp\EXCEL\51EC0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 13084
QUERY_FILE_INFORMATION 13084
ReadX 13084 0 512 512
ReadX 13084 512 512 512
ReadX 13084 1024 512 512
QUERY_FILE_INFORMATION 13084
QUERY_FILE_INFORMATION 13084
ReadX 13084 576 2048 2048
QUERY_FILE_INFORMATION 13084
QUERY_FILE_INFORMATION 13084
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x2 13086
Close 13086
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN 0x40 0x2 13088
WriteX 13088 4076 1 1
QUERY_FILE_INFORMATION 13088
WriteX 13088 0 7983 7983
Close 13088
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x2 13090
Close 13090
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN 0x40 0x2 13092
WriteX 13092 4095 1 1
QUERY_FILE_INFORMATION 13092
WriteX 13092 0 65471 65471
WriteX 13092 65471 65 65
WriteX 13092 65536 65471 65471
WriteX 13092 131007 65 65
WriteX 13092 131072 65471 65471
WriteX 13092 196543 65 65
WriteX 13092 196608 65471 65471
WriteX 13092 262079 65 65
WriteX 13092 262144 65471 65471
WriteX 13092 327615 65 65
WriteX 13092 327680 65471 65471
WriteX 13092 393151 65 65
WriteX 13092 393216 65471 65471
WriteX 13092 458687 65 65
WriteX 13092 458752 46731 46731
Close 13092
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\62AD0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\62AD0000 0x40 0x2 13093
WriteX 13093 1535 1 1
QUERY_FILE_INFORMATION 13093
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13084 1536 512 512
ReadX 13084 2048 2018 2018
ReadX 13084 4096 512 512
ReadX 13084 4608 2197 2197
QUERY_FILE_INFORMATION 13093
WriteX 13093 0 65471 65471
WriteX 13093 65471 65 65
WriteX 13093 65536 22848 22848
WriteX 13093 0 4096 4096
Flush 13093
QUERY_FILE_INFORMATION 13084
QUERY_FILE_INFORMATION 13084
Close 13084
WriteX 13093 0 4096 4096
Close 13093
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\62AD0000
NTCreateX \clients\client1\~dmtmp\EXCEL\62AD0000 0x200000 0x1 13094
Close 13094
Rename \clients\client1\~dmtmp\EXCEL\62AD0000 \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\RESULTS.XLS 0x40 0x1 13095
QUERY_FILE_INFORMATION 13095
ReadX 13095 0 512 512
ReadX 13095 512 512 512
ReadX 13095 1024 512 512
QUERY_FILE_INFORMATION 13095
QUERY_FILE_INFORMATION 13095
ReadX 13095 576 2048 2048
QUERY_FILE_INFORMATION 13095
QUERY_FILE_INFORMATION 13095
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13095 4096 512 512
Close 13095
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLA 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLT 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLM 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLW 1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES.XLS 0x40 0x1 13096
QUERY_FILE_INFORMATION 13096
ReadX 13096 0 512 512
ReadX 13096 512 512 512
ReadX 13096 1024 512 512
QUERY_FILE_INFORMATION 13096
QUERY_FILE_INFORMATION 13096
ReadX 13096 288 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FILE_INFORMATION 13096
QUERY_FILE_INFORMATION 13096
ReadX 13096 288 4096 4096
QUERY_FILE_INFORMATION 13096
QUERY_FILE_INFORMATION 13096
QUERY_FILE_INFORMATION 13096
WriteX 13096 288 4096 4096
WriteX 13096 1024 512 512
ReadX 13096 1536 512 512
QUERY_FILE_INFORMATION 13096
ReadX 13096 288 2048 2048
ReadX 13096 2336 2048 2048
ReadX 13096 3072 1536 1536
ReadX 13096 544 512 512
ReadX 13096 1056 2048 2048
ReadX 13096 3104 2048 2048
ReadX 13096 5152 2048 2048
ReadX 13096 7200 2048 2048
ReadX 13096 9248 2048 2048
ReadX 13096 11296 2048 2048
ReadX 13096 13344 2048 2048
ReadX 13096 15392 2048 2048
ReadX 13096 17440 2048 2048
ReadX 13096 19488 2048 2048
ReadX 13096 21536 2048 2048
ReadX 13096 23584 2048 2048
ReadX 13096 25632 2048 2048
ReadX 13096 27680 2048 2048
ReadX 13096 29728 2048 2048
ReadX 13096 31776 2048 2048
ReadX 13096 33824 2048 2048
ReadX 13096 35872 2048 2048
ReadX 13096 37920 2048 2048
ReadX 13096 39968 2048 2048
ReadX 13096 42016 512 512
ReadX 13096 42528 512 512
ReadX 13096 43040 1536 1536
ReadX 13096 44576 2048 2048
ReadX 13096 46624 2048 2048
ReadX 13096 48672 2048 2048
ReadX 13096 50720 2048 2048
ReadX 13096 52768 2048 2048
ReadX 13096 54816 2048 2048
ReadX 13096 56864 2048 2048
ReadX 13096 58912 2048 2048
ReadX 13096 60960 2048 2048
ReadX 13096 63008 2048 2048
ReadX 13096 65056 2048 2048
ReadX 13096 67104 2048 2048
ReadX 13096 69152 2048 2048
ReadX 13096 71200 2048 2048
ReadX 13096 73248 2048 2048
ReadX 13096 75296 2048 2048
ReadX 13096 77344 2048 2048
ReadX 13096 79392 2048 2048
ReadX 13096 81440 2048 2048
ReadX 13096 83488 2048 2048
ReadX 13096 85536 512 512
ReadX 13096 86048 512 512
ReadX 13096 86560 1536 1536
ReadX 13096 88096 2048 2048
ReadX 13096 90144 2048 2048
ReadX 13096 92192 2048 2048
ReadX 13096 94240 2048 2048
ReadX 13096 96288 2048 2048
ReadX 13096 552 2048 2048
ReadX 13096 2600 2048 2048
ReadX 13096 4648 2048 2048
ReadX 13096 6696 2048 2048
ReadX 13096 8744 2048 2048
ReadX 13096 10792 2048 2048
ReadX 13096 12840 2048 2048
ReadX 13096 14888 2048 2048
ReadX 13096 16936 2048 2048
ReadX 13096 18984 2048 2048
ReadX 13096 21032 2048 2048
ReadX 13096 23080 2048 2048
ReadX 13096 25128 2048 2048
ReadX 13096 27176 2048 2048
ReadX 13096 29224 2048 2048
ReadX 13096 31272 2048 2048
ReadX 13096 33320 2048 2048
ReadX 13096 35368 2048 2048
ReadX 13096 37416 2048 2048
ReadX 13096 39464 2048 2048
ReadX 13096 41512 512 512
ReadX 13096 42024 512 512
ReadX 13096 42536 1536 1536
ReadX 13096 44072 2048 2048
ReadX 13096 46120 2048 2048
ReadX 13096 48168 2048 2048
ReadX 13096 50216 2048 2048
ReadX 13096 52264 2048 2048
ReadX 13096 54312 2048 2048
ReadX 13096 56360 2048 2048
ReadX 13096 58408 2048 2048
ReadX 13096 60456 2048 2048
ReadX 13096 62504 2048 2048
ReadX 13096 64552 2048 2048
ReadX 13096 66600 2048 2048
ReadX 13096 68648 2048 2048
ReadX 13096 70696 2048 2048
ReadX 13096 72744 2048 2048
ReadX 13096 74792 2048 2048
ReadX 13096 76840 2048 2048
ReadX 13096 78888 2048 2048
ReadX 13096 80936 2048 2048
ReadX 13096 82984 2048 2048
ReadX 13096 85032 512 512
ReadX 13096 85544 2048 2048
ReadX 13096 87592 2048 2048
ReadX 13096 89640 2048 2048
ReadX 13096 91688 2048 2048
ReadX 13096 93736 2048 2048
ReadX 13096 95784 2048 2048
ReadX 13096 97832 2048 2048
ReadX 13096 99880 2048 2048
ReadX 13096 101928 2048 2048
ReadX 13096 103976 2048 2048
ReadX 13096 106024 2048 2048
ReadX 13096 108072 2048 2048
ReadX 13096 110120 2048 2048
ReadX 13096 112168 2048 2048
ReadX 13096 114216 2048 2048
ReadX 13096 116264 2048 2048
ReadX 13096 118312 2048 2048
ReadX 13096 120360 2048 2048
ReadX 13096 122408 2048 2048
ReadX 13096 124456 512 512
ReadX 13096 124968 512 512
ReadX 13096 125480 1536 1536
ReadX 13096 127016 2048 2048
ReadX 13096 129064 2048 2048
ReadX 13096 131112 2048 2048
ReadX 13096 133160 2048 2048
ReadX 13096 135208 2048 2048
ReadX 13096 137256 2048 2048
ReadX 13096 139304 2048 2048
ReadX 13096 141352 2048 2048
ReadX 13096 143400 2048 2048
ReadX 13096 145448 2048 2048
ReadX 13096 147496 2048 2048
ReadX 13096 149544 2048 2048
ReadX 13096 151592 2048 2048
ReadX 13096 153640 2048 2048
ReadX 13096 155688 2048 2048
ReadX 13096 157736 2048 2048
ReadX 13096 159784 2048 2048
ReadX 13096 161832 2048 2048
ReadX 13096 163880 2048 2048
ReadX 13096 165928 2048 2048
ReadX 13096 167976 2048 2048
ReadX 13096 170024 512 512
ReadX 13096 1538 1536 1536
ReadX 13096 3074 2048 2048
ReadX 13096 5122 2048 2048
ReadX 13096 7170 2048 2048
ReadX 13096 9218 2048 2048
ReadX 13096 11266 2048 2048
ReadX 13096 13314 2048 2048
ReadX 13096 15362 2048 2048
ReadX 13096 17410 2048 2048
ReadX 13096 19458 2048 2048
ReadX 13096 21506 2048 2048
ReadX 13096 23554 2048 2048
ReadX 13096 25602 2048 2048
ReadX 13096 27650 2048 2048
ReadX 13096 29698 2048 2048
ReadX 13096 31746 2048 2048
ReadX 13096 33794 2048 2048
ReadX 13096 35842 2048 2048
ReadX 13096 37890 2048 2048
ReadX 13096 39938 2048 2048
ReadX 13096 41986 2048 2048
ReadX 13096 44034 875 875
ReadX 13096 1730 4096 4096
ReadX 13096 1724 1536 1536
ReadX 13096 1746 588 588
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES.XLS
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES 1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.XLS 0x40 0x2 13097
Close 13097
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.XLS   1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\E0BD0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\E0BD0000 0x40 0x2 13098
WriteX 13098 2047 1 1
QUERY_FILE_INFORMATION 13098
Close 13096
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES.XLS 0x40 0x1 13099
Close 13099
WriteX 13098 0 42388 42388
Close 13098
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.XLS   1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\E0BD0000
NTCreateX \clients\client1\~dmtmp\EXCEL\E0BD0000 0x200000 0x1 13100
Close 13100
Rename \clients\client1\~dmtmp\EXCEL\E0BD0000 \clients\client1\~dmtmp\EXCEL\SALES1.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.XLS 0x40 0x1 13101
QUERY_FILE_INFORMATION 13101
ReadX 13101 0 512 512
ReadX 13101 1756 512 512
ReadX 13101 2268 512 512
QUERY_FILE_INFORMATION 13101
QUERY_FILE_INFORMATION 13101
ReadX 13101 1744 512 512
ReadX 13101 2256 512 512
ReadX 13101 2768 512 512
ReadX 13101 3280 512 512
ReadX 13101 3792 512 512
ReadX 13101 4304 512 512
ReadX 13101 512 2048 2048
QUERY_FILE_INFORMATION 13101
QUERY_FILE_INFORMATION 13101
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\BEED0000 1
NTCreateX \clients\client1\~dmtmp\EXCEL\BEED0000 0x40 0x2 13102
WriteX 13102 2047 1 1
QUERY_FILE_INFORMATION 13102
QUERY_FILE_INFORMATION 13101
QUERY_FILE_INFORMATION 13101
Close 13101
WriteX 13102 0 42652 42652
Close 13102
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\BEED0000
NTCreateX \clients\client1\~dmtmp\EXCEL\BEED0000 0x200000 0x1 13103
Close 13103
Rename \clients\client1\~dmtmp\EXCEL\BEED0000 \clients\client1\~dmtmp\EXCEL\SALES1.XLS
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.XLS 0x40 0x1 13104
QUERY_FILE_INFORMATION 13104
ReadX 13104 0 512 512
ReadX 13104 1762 512 512
ReadX 13104 2274 512 512
QUERY_FILE_INFORMATION 13104
QUERY_FILE_INFORMATION 13104
ReadX 13104 1750 512 512
ReadX 13104 2262 512 512
ReadX 13104 2774 512 512
ReadX 13104 3286 512 512
ReadX 13104 3798 512 512
ReadX 13104 4310 512 512
ReadX 13104 512 2048 2048
QUERY_FILE_INFORMATION 13104
QUERY_FILE_INFORMATION 13104
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.PRN   1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x2 13106
Close 13106
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.PRN
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\EXCEL\SALES1.PRN 0x40 0x2 13108
WriteX 13108 4080 1 1
QUERY_FILE_INFORMATION 13108
WriteX 13108 0 65471 65471
WriteX 13108 65471 65 65
WriteX 13108 65536 49 49
Close 13108
Close 13104
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13109
WriteX 13109 0 65471 65471
WriteX 13109 65471 63 63
WriteX 13109 65534 65471 65471
WriteX 13109 131005 63 63
Close 13109
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13110
WriteX 13110 0 65471 65471
WriteX 13110 65471 63 63
WriteX 13110 65534 65471 65471
WriteX 13110 131005 63 63
WriteX 13110 131068 65471 65471
WriteX 13110 196539 63 63
WriteX 13110 196602 65471 65471
WriteX 13110 262073 63 63
Close 13110
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13111
WriteX 13111 0 65471 65471
WriteX 13111 65471 63 63
WriteX 13111 65534 65471 65471
WriteX 13111 131005 63 63
WriteX 13111 131068 65471 65471
WriteX 13111 196539 63 63
WriteX 13111 196602 65471 65471
WriteX 13111 262073 63 63
WriteX 13111 262136 65471 65471
WriteX 13111 327607 63 63
WriteX 13111 327670 65471 65471
WriteX 13111 393141 63 63
WriteX 13111 393204 65471 65471
WriteX 13111 458675 63 63
WriteX 13111 458738 65471 65471
WriteX 13111 524209 63 63
Close 13111
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\PMC162.TMP 0x40 0x2 13112
Close 13112
Unlink \clients\client1\~dmtmp\PM\PMC162.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMC162.TMP 0x40 0x2 13113
Close 13113
Unlink \clients\client1\~dmtmp\PM\PMC162.TMP
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\C 1
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC175.TMP 0x40 0x2 13116
Close 13116
Unlink \clients\client1\~dmtmp\PM\PMC175.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC176.TMP 0x40 0x2 13118
Close 13118
Unlink \clients\client1\~dmtmp\PM\PMC176.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMC180.TMP 0x40 0x2 13119
Close 13119
Unlink \clients\client1\~dmtmp\PM\PMC180.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\P 1
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC183.TMP 0x40 0x2 13122
Close 13122
Unlink \clients\client1\~dmtmp\PM\PMC183.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC183.TMP 0x40 0x2 13124
Close 13124
Unlink \clients\client1\~dmtmp\PM\PMC183.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMC183.TMP 0x40 0x2 13125
Close 13125
Unlink \clients\client1\~dmtmp\PM\PMC183.TMP
NTCreateX \clients\client1\~dmtmp\PM\B 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\B 1
NTCreateX \clients\client1\~dmtmp\PM\B 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 13128
Close 13128
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\B 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BE 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BE 1
NTCreateX \clients\client1\~dmtmp\PM\BE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 13132
Close 13132
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\BE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BEN 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BEN 1
NTCreateX \clients\client1\~dmtmp\PM\BEN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 13136
Close 13136
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\BEN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENC 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENC 1
NTCreateX \clients\client1\~dmtmp\PM\BENC 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC184.TMP 0x40 0x2 13140
Close 13140
Unlink \clients\client1\~dmtmp\PM\PMC184.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENC 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCH 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCH 1
NTCreateX \clients\client1\~dmtmp\PM\BENCH 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC185.TMP 0x40 0x2 13144
Close 13144
Unlink \clients\client1\~dmtmp\PM\PMC185.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCH 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCHD 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHD 1
NTCreateX \clients\client1\~dmtmp\PM\BENCHD 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC185.TMP 0x40 0x2 13148
Close 13148
Unlink \clients\client1\~dmtmp\PM\PMC185.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCHD 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDE 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHDE 1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC185.TMP 0x40 0x2 13152
Close 13152
Unlink \clients\client1\~dmtmp\PM\PMC185.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCHDE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDES 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHDES 1
NTCreateX \clients\client1\~dmtmp\PM\BENCHDES 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMC186.TMP 0x40 0x2 13156
Close 13156
Unlink \clients\client1\~dmtmp\PM\PMC186.TMP
NTCreateX \clients\client1\~dmtmp\PM\BENCHDES 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BENCHDES 1
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\PMC1A2.TMP 0x40 0x2 13158
Close 13158
Unlink \clients\client1\~dmtmp\PM\PMC1A2.TMP
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BDES1.PRN 1
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x2 13160
Close 13160
Unlink \clients\client1\~dmtmp\PM\BDES1.PRN
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\BDES1.PRN 0x40 0x2 13162
WriteX 13162 4095 1 1
QUERY_FILE_INFORMATION 13162
QUERY_FS_INFORMATION 259
WriteX 13162 0 65471 65471
WriteX 13162 65471 65 65
WriteX 13162 65536 65471 65471
WriteX 13162 131007 65 65
WriteX 13162 131072 65471 65471
WriteX 13162 196543 65 65
WriteX 13162 196608 65471 65471
WriteX 13162 262079 65 65
WriteX 13162 262144 26634 26634
Close 13162
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BDES1 1
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\T 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1.X 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1.XL 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13167
QUERY_FILE_INFORMATION 13167
QUERY_FILE_INFORMATION 13167
Close 13167
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13168
Close 13168
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13169
Close 13169
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13170
QUERY_FILE_INFORMATION 13170
ReadX 13170 0 512 512
ReadX 13170 288 512 512
ReadX 13170 800 512 512
Close 13170
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13171
ReadX 13171 0 24 24
Close 13171
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13172
ReadX 13172 0 24 24
Close 13172
NTCreateX \clients\client1\~dmtmp\PM\T1.XLS 0x40 0x1 13173
QUERY_FILE_INFORMATION 13173
ReadX 13173 0 512 512
ReadX 13173 288 512 512
ReadX 13173 800 512 512
ReadX 13173 512 4096 4096
QUERY_FS_INFORMATION 259
ReadX 13173 1759 2849 2849
Close 13173
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 13174
Close 13174
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\C 1
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 13177
Close 13177
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 13179
Close 13179
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMD383.TMP 0x40 0x2 13180
Close 13180
Unlink \clients\client1\~dmtmp\PM\PMD383.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\P 1
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD391.TMP 0x40 0x2 13183
Close 13183
Unlink \clients\client1\~dmtmp\PM\PMD391.TMP
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD391.TMP 0x40 0x2 13185
Close 13185
Unlink \clients\client1\~dmtmp\PM\PMD391.TMP
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13186
Close 13186
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\C 1
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13189
Close 13189
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CS 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CS 1
NTCreateX \clients\client1\~dmtmp\PM\CS 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13193
Close 13193
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\CS 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN 1
NTCreateX \clients\client1\~dmtmp\PM\CSN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13197
Close 13197
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD392.TMP 0x40 0x2 13201
Close 13201
Unlink \clients\client1\~dmtmp\PM\PMD392.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_ 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_ 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_ 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD393.TMP 0x40 0x2 13205
Close 13205
Unlink \clients\client1\~dmtmp\PM\PMD393.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_ 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD393.TMP 0x40 0x2 13209
Close 13209
Unlink \clients\client1\~dmtmp\PM\PMD393.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD394.TMP 0x40 0x2 13212
Close 13212
Unlink \clients\client1\~dmtmp\PM\PMD394.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.P 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2.P 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD394.TMP 0x40 0x2 13216
Close 13216
Unlink \clients\client1\~dmtmp\PM\PMD394.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.PM 0x40 0x1 -1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2.PM 1
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.PM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD394.TMP 0x40 0x2 13220
Close 13220
Unlink \clients\client1\~dmtmp\PM\PMD394.TMP
NTCreateX \clients\client1\~dmtmp\PM\CSN1_2.PM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\PMD395.TMP 0x40 0x2 13222
Close 13222
Unlink \clients\client1\~dmtmp\PM\PMD395.TMP
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\PMD3A4.TMP 0x40 0x2 13223
Close 13223
Unlink \clients\client1\~dmtmp\PM\PMD3A4.TMP
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\CSN1_2A 1
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\E 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EV 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVEN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.D 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DO 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13232
QUERY_FILE_INFORMATION 13232
QUERY_FILE_INFORMATION 13232
Close 13232
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13233
Close 13233
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13234
Close 13234
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13235
QUERY_FILE_INFORMATION 13235
ReadX 13235 0 512 512
ReadX 13235 288 512 512
ReadX 13235 800 512 512
Close 13235
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13236
ReadX 13236 0 24 24
Close 13236
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13237
QUERY_FILE_INFORMATION 13237
ReadX 13237 0 512 512
ReadX 13237 288 512 512
ReadX 13237 800 512 512
ReadX 13237 512 36 36
Close 13237
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\EVENTS.DOC 0x40 0x1 13238
QUERY_FILE_INFORMATION 13238
ReadX 13238 0 512 512
ReadX 13238 288 512 512
ReadX 13238 800 512 512
ReadX 13238 512 682 682
ReadX 13238 3584 106 106
ReadX 13238 3712 10 10
ReadX 13238 3722 10 10
ReadX 13238 512 2048 2048
ReadX 13238 3072 512 512
ReadX 13238 276 84 84
ReadX 13238 273 49 49
ReadX 13238 2560 512 512
Close 13238
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\C 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\P 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\M 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MO 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOV 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVE 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED.D 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DO 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13248
QUERY_FILE_INFORMATION 13248
QUERY_FILE_INFORMATION 13248
Close 13248
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13249
Close 13249
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13250
Close 13250
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13251
QUERY_FILE_INFORMATION 13251
ReadX 13251 0 512 512
ReadX 13251 288 512 512
ReadX 13251 800 512 512
Close 13251
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13252
ReadX 13252 0 24 24
Close 13252
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13253
QUERY_FILE_INFORMATION 13253
ReadX 13253 0 512 512
ReadX 13253 288 512 512
ReadX 13253 800 512 512
ReadX 13253 512 36 36
Close 13253
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\PM\MOVED.DOC 0x40 0x1 13254
QUERY_FILE_INFORMATION 13254
ReadX 13254 0 512 512
ReadX 13254 288 512 512
ReadX 13254 800 512 512
ReadX 13254 512 682 682
ReadX 13254 3072 106 106
ReadX 13254 3200 10 10
ReadX 13254 3210 10 10
ReadX 13254 512 2048 2048
ReadX 13254 2560 512 512
ReadX 13254 3887 84 84
ReadX 13254 3838 49 49
ReadX 13254 2048 512 512
Close 13254
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD
FIND_FIRST \clients\client1\~dmtmp\WORD\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC
Unlink \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
Unlink \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL
FIND_FIRST \clients\client1\~dmtmp\EXCEL\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS2.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS3.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
Unlink \clients\client1\~dmtmp\EXCEL\RESULTS.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.XLS
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.XLS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\EXCEL\SALES1.PRN
Unlink \clients\client1\~dmtmp\EXCEL\SALES1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT
FIND_FIRST \clients\client1\~dmtmp\PWRPNT\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
Unlink \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
Unlink \clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL
FIND_FIRST \clients\client1\~dmtmp\COREL\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.CDR
Unlink \clients\client1\~dmtmp\COREL\GRAPH1.CDR
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH1.BAK
Unlink \clients\client1\~dmtmp\COREL\GRAPH1.BAK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.CDR
Unlink \clients\client1\~dmtmp\COREL\GRAPH2.CDR
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\COREL\GRAPH2.BAK
Unlink \clients\client1\~dmtmp\COREL\GRAPH2.BAK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO
FIND_FIRST \clients\client1\~dmtmp\WORDPRO\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
FIND_FIRST \clients\client1\~dmtmp\PM\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PM\BDES1.PRN
Unlink \clients\client1\~dmtmp\PM\BDES1.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX
FIND_FIRST \clients\client1\~dmtmp\PARADOX\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.VAL
Unlink \clients\client1\~dmtmp\PARADOX\COURSES.VAL
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\CHANGED.DB
Unlink \clients\client1\~dmtmp\PARADOX\CHANGED.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.MB
Unlink \clients\client1\~dmtmp\PARADOX\ANSWER.MB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.DB
Unlink \clients\client1\~dmtmp\PARADOX\ANSWER.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS
FIND_FIRST \clients\client1\~dmtmp\ACCESS\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\INV.PRN
Unlink \clients\client1\~dmtmp\ACCESS\INV.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\SALES.PRN
Unlink \clients\client1\~dmtmp\ACCESS\SALES.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\LABELS.PRN
Unlink \clients\client1\~dmtmp\ACCESS\LABELS.PRN
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\SEED\*
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 13255
Close 13255
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 13256
QUERY_FILE_INFORMATION 13256
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.~TS
QUERY_FILE_INFORMATION 13256
QUERY_FILE_INFORMATION 13256
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS.LWP 0x40 0x1 13257
QUERY_FILE_INFORMATION 13257
QUERY_FILE_INFORMATION 13257
QUERY_FILE_INFORMATION 13257
ReadX 13257 2156 24 24
ReadX 13257 2139 276 276
ReadX 13257 2136 14 14
ReadX 13257 2136 7 7
ReadX 13257 2138 12 12
ReadX 13257 2137 8 8
ReadX 13257 2135 15 15
ReadX 13257 0 16 16
ReadX 13257 16 2048 2048
ReadX 13257 2064 2048 2048
ReadX 13257 257 2048 2048
ReadX 13257 385 2048 2048
ReadX 13257 513 2048 2048
ReadX 13257 641 2048 2048
ReadX 13257 769 2048 2048
ReadX 13257 897 2048 2048
ReadX 13257 1025 2048 2048
ReadX 13257 1153 2048 2048
ReadX 13257 1281 2048 2048
ReadX 13257 1409 2048 2048
ReadX 13257 1537 408 408
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x2 13259
Close 13259
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13261
WriteX 13261 15 1 1
QUERY_FILE_INFORMATION 13261
WriteX 13261 0 10575 10575
Flush 13261
Close 13261
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13262
Close 13262
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 13263
QUERY_FILE_INFORMATION 13263
QUERY_FILE_INFORMATION 13263
QUERY_FILE_INFORMATION 13263
ReadX 13263 2157 24 24
ReadX 13263 2139 276 276
ReadX 13263 2137 14 14
ReadX 13263 2137 7 7
ReadX 13263 2139 12 12
ReadX 13263 2138 8 8
ReadX 13263 2136 15 15
Close 13257
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS.~TS
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13264
Close 13264
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13265
QUERY_FILE_INFORMATION 13265
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13266
QUERY_FILE_INFORMATION 13266
ReadX 13266 0 512 512
ReadX 13266 512 512 512
ReadX 13266 1024 512 512
QUERY_FILE_INFORMATION 13266
QUERY_FILE_INFORMATION 13266
Close 13266
QUERY_FILE_INFORMATION 13265
ReadX 13265 0 24 24
NTCreateX \clients\client1\~dmtmp\WORDPRO\RESULTS.XLS 0x40 0x1 13267
QUERY_FILE_INFORMATION 13267
ReadX 13267 0 512 512
ReadX 13267 512 512 512
ReadX 13267 1024 512 512
ReadX 13267 288 20 20
ReadX 13267 308 2084 2084
ReadX 13267 388 2084 2084
ReadX 13267 388 2084 2084
ReadX 13256 2157 1386 1386
ReadX 13267 2472 399 399
ReadX 13267 3072 1536 1536
ReadX 13267 544 149 149
ReadX 13267 693 485 485
Close 13267
ReadX 13256 2157 4096 4096
ReadX 13256 6253 4096 4096
ReadX 13256 10349 4096 4096
ReadX 13256 14445 4096 4096
ReadX 13256 18541 4096 4096
ReadX 13256 22637 256 256
ReadX 13256 22893 4096 4096
ReadX 13256 26989 4096 4096
ReadX 13256 31085 4096 4096
ReadX 13256 35181 4096 4096
ReadX 13256 39277 4096 4096
ReadX 13256 43373 4096 4096
ReadX 13256 47469 4096 4096
QUERY_FS_INFORMATION 259
ReadX 13256 2157 1024 1024
ReadX 13256 1667 4688 4688
ReadX 13256 6355 3516 3516
ReadX 13256 9871 16384 16384
ReadX 13256 26255 3771 3771
ReadX 13256 30026 2048 2048
ReadX 13256 32074 1024 1024
ReadX 13256 33098 6652 6652
ReadX 13256 39750 16384 16384
ReadX 13256 56134 10496 10496
ReadX 13256 66630 1784 1784
ReadX 13256 68414 90 90
ReadX 13256 68504 273 273
ReadX 13256 68777 1600 1600
ReadX 13256 70377 640 640
ReadX 13256 71017 1280 1280
ReadX 13256 72297 8464 8464
ReadX 13256 80761 158 158
ReadX 13256 80919 912 912
ReadX 13256 81831 1980 1980
ReadX 13256 83811 2256 2256
ReadX 13256 86067 400 400
ReadX 13256 86467 252 252
ReadX 13256 86719 42 42
ReadX 13256 86761 725 725
ReadX 13256 2009 512 512
ReadX 13256 3895 9 9
ReadX 13256 3781 46 46
ReadX 13256 4059 92 92
ReadX 13256 3781 92 92
ReadX 13256 3986 184 184
ReadX 13256 3987 16384 16384
ReadX 13256 3902 16384 16384
ReadX 13256 3781 10240 10240
ReadX 13256 3821 16384 16384
ReadX 13256 3891 935 935
ReadX 13256 4060 10240 10240
ReadX 13256 4059 184 184
ReadX 13256 256 184 184
ReadX 13256 256 1026 1026
ReadX 13256 3901 326 326
ReadX 13256 3899 652 652
ReadX 13256 256 2 2
ReadX 13256 258 4948 4948
Close 13256
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x2 13269
Close 13269
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN 0x40 0x2 13271
WriteX 13271 4055 1 1
QUERY_FILE_INFORMATION 13271
WriteX 13271 0 65471 65471
WriteX 13271 65471 65 65
WriteX 13271 65536 65471 65471
WriteX 13271 131007 65 65
WriteX 13271 131072 65471 65471
WriteX 13271 196543 65 65
WriteX 13271 196608 65471 65471
WriteX 13271 262079 65 65
WriteX 13271 262144 65471 65471
WriteX 13271 327615 65 65
WriteX 13271 327680 65471 65471
WriteX 13271 393151 65 65
WriteX 13271 393216 65471 65471
WriteX 13271 458687 65 65
WriteX 13271 458752 65471 65471
WriteX 13271 524223 65 65
WriteX 13271 524288 65471 65471
WriteX 13271 589759 65 65
WriteX 13271 589824 35257 35257
Close 13271
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x2 13273
Close 13273
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN 0x40 0x2 13275
WriteX 13275 4055 1 1
QUERY_FILE_INFORMATION 13275
WriteX 13275 0 65471 65471
WriteX 13275 65471 65 65
WriteX 13275 65536 65471 65471
WriteX 13275 131007 65 65
WriteX 13275 131072 65471 65471
WriteX 13275 196543 65 65
WriteX 13275 196608 65471 65471
WriteX 13275 262079 65 65
WriteX 13275 262144 65471 65471
WriteX 13275 327615 65 65
WriteX 13275 327680 65471 65471
WriteX 13275 393151 65 65
WriteX 13275 393216 65471 65471
WriteX 13275 458687 65 65
WriteX 13275 458752 65471 65471
WriteX 13275 524223 65 65
WriteX 13275 524288 65471 65471
WriteX 13275 589759 65 65
WriteX 13275 589824 57598 57598
Close 13275
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13277
WriteX 13277 15 1 1
QUERY_FILE_INFORMATION 13277
WriteX 13277 0 12543 12543
Flush 13277
Close 13277
Close 13263
Unlink \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13278
Close 13278
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP 0x40 0x1 13279
QUERY_FILE_INFORMATION 13279
QUERY_FILE_INFORMATION 13279
QUERY_FILE_INFORMATION 13279
ReadX 13279 288 24 24
ReadX 13279 287 276 276
ReadX 13279 286 14 14
ReadX 13279 286 7 7
ReadX 13279 287 12 12
ReadX 13279 287 8 8
ReadX 13279 286 15 15
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 13280
Close 13280
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 13281
QUERY_FILE_INFORMATION 13281
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS
QUERY_FILE_INFORMATION 13281
QUERY_FILE_INFORMATION 13281
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP 0x40 0x1 13282
QUERY_FILE_INFORMATION 13282
QUERY_FILE_INFORMATION 13282
QUERY_FILE_INFORMATION 13282
ReadX 13282 1938 24 24
ReadX 13282 1920 276 276
ReadX 13282 1918 14 14
ReadX 13282 1918 7 7
ReadX 13282 1919 12 12
ReadX 13282 1919 8 8
ReadX 13282 1917 15 15
ReadX 13282 0 16 16
ReadX 13282 16 2048 2048
ReadX 13282 2064 2048 2048
ReadX 13282 257 2048 2048
ReadX 13282 385 2048 2048
ReadX 13282 513 2048 2048
ReadX 13282 641 2048 2048
ReadX 13282 769 2048 2048
ReadX 13282 897 2048 2048
ReadX 13282 1025 2048 2048
ReadX 13282 1153 1385 1385
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x2 13284
Close 13284
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13286
WriteX 13286 15 1 1
QUERY_FILE_INFORMATION 13286
WriteX 13286 0 11588 11588
Flush 13286
Close 13286
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13287
Close 13287
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 13288
QUERY_FILE_INFORMATION 13288
QUERY_FILE_INFORMATION 13288
QUERY_FILE_INFORMATION 13288
ReadX 13288 1909 24 24
ReadX 13288 1892 276 276
ReadX 13288 1889 14 14
ReadX 13288 1889 7 7
ReadX 13288 1891 12 12
ReadX 13288 1890 8 8
ReadX 13288 1888 15 15
Close 13282
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13290
WriteX 13290 15 1 1
QUERY_FILE_INFORMATION 13290
WriteX 13290 0 11615 11615
Flush 13290
Close 13290
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Close 13288
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13291
Close 13291
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 13292
QUERY_FILE_INFORMATION 13292
QUERY_FILE_INFORMATION 13292
QUERY_FILE_INFORMATION 13292
ReadX 13292 1947 24 24
ReadX 13292 1929 276 276
ReadX 13292 1927 14 14
ReadX 13292 1927 7 7
ReadX 13292 1929 12 12
ReadX 13292 1928 8 8
ReadX 13292 1926 15 15
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x2 13294
Close 13294
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN 0x40 0x2 13296
WriteX 13296 4088 1 1
QUERY_FILE_INFORMATION 13296
WriteX 13296 0 65471 65471
WriteX 13296 65471 65 65
WriteX 13296 65536 16050 16050
Close 13296
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13281 1939 64 64
ReadX 13281 128 248 248
ReadX 13281 128 568 568
ReadX 13281 3872 1536 1536
ReadX 13281 3456 2560 2560
ReadX 13281 3136 512 512
ReadX 13281 2880 4096 4096
ReadX 13281 3264 3072 3072
ReadX 13281 320 4096 4096
ReadX 13281 1024 4096 4096
ReadX 13281 3616 4096 4096
ReadX 13281 1939 64 64
ReadX 13281 128 248 248
ReadX 13281 128 608 608
ReadX 13281 2858 1024 1024
ReadX 13281 2810 4096 4096
ReadX 13281 2826 4096 4096
ReadX 13281 2580 2048 2048
ReadX 13281 2800 2560 2560
ReadX 13281 2100 4096 4096
ReadX 13281 2084 4096 4096
ReadX 13281 868 4096 4096
ReadX 13281 2324 4096 4096
ReadX 13281 884 4096 4096
ReadX 13281 2604 1024 1024
ReadX 13281 580 4096 4096
ReadX 13281 596 4096 4096
ReadX 13281 2752 4096 4096
ReadX 13281 2842 1024 1024
ReadX 13281 660 4096 4096
ReadX 13281 2720 4096 4096
ReadX 13281 2736 4096 4096
ReadX 13281 628 4096 4096
ReadX 13281 2704 4096 4096
ReadX 13281 1556 4096 4096
ReadX 13281 576 4096 4096
ReadX 13281 3168 1536 1536
ReadX 13281 832 4096 4096
ReadX 13281 1088 4096 4096
ReadX 13281 1344 4096 4096
ReadX 13281 1600 4096 4096
ReadX 13281 1856 4096 4096
ReadX 13281 2112 4096 4096
ReadX 13281 1892 4096 4096
ReadX 13281 820 4096 4096
ReadX 13281 788 4096 4096
ReadX 13281 1604 4096 4096
ReadX 13281 3648 4096 4096
ReadX 13281 2608 4096 4096
ReadX 13281 548 4096 4096
ReadX 13281 740 4096 4096
ReadX 13281 1344 4096 4096
ReadX 13281 3392 4096 4096
ReadX 13281 3904 4096 4096
ReadX 13281 644 4096 4096
ReadX 13281 676 4096 4096
ReadX 13281 2688 4096 4096
ReadX 13281 320 4096 4096
ReadX 13281 900 4096 4096
ReadX 13281 1908 4096 4096
ReadX 13281 852 4096 4096
ReadX 13281 724 4096 4096
ReadX 13281 2292 4096 4096
ReadX 13281 612 4096 4096
ReadX 13281 388 4096 4096
ReadX 13281 2368 4096 4096
ReadX 13281 2624 4096 4096
ReadX 13281 500 4096 4096
ReadX 13281 356 4096 4096
ReadX 13281 1024 4096 4096
ReadX 13281 576 4096 4096
ReadX 13281 340 4096 4096
ReadX 13281 420 4096 4096
ReadX 13281 1600 4096 4096
ReadX 13281 404 4096 4096
ReadX 13281 1428 4096 4096
ReadX 13281 2656 4096 4096
ReadX 13281 2624 4096 4096
ReadX 13281 452 4096 4096
ReadX 13281 692 4096 4096
ReadX 13281 564 4096 4096
ReadX 13281 372 4096 4096
ReadX 13281 468 4096 4096
ReadX 13281 484 4096 4096
ReadX 13281 1088 4096 4096
ReadX 13281 1924 4096 4096
ReadX 13281 2768 4096 4096
ReadX 13281 832 4096 4096
ReadX 13281 836 4096 4096
ReadX 13281 1856 4096 4096
ReadX 13281 2640 4096 4096
ReadX 13281 436 4096 4096
ReadX 13281 1828 4096 4096
ReadX 13281 804 4096 4096
ReadX 13281 1860 4096 4096
ReadX 13281 1812 4096 4096
ReadX 13281 756 4096 4096
ReadX 13281 1636 4096 4096
ReadX 13281 772 4096 4096
ReadX 13281 2036 4096 4096
ReadX 13281 1220 4096 4096
ReadX 13281 1652 4096 4096
ReadX 13281 2588 4096 4096
ReadX 13281 916 4096 4096
ReadX 13281 260 4096 4096
ReadX 13281 932 4096 4096
ReadX 13281 2624 4096 4096
ReadX 13281 308 4096 4096
ReadX 13281 292 4096 4096
ReadX 13281 1140 4096 4096
ReadX 13281 276 4096 4096
ReadX 13281 2020 4096 4096
ReadX 13281 2880 4096 4096
ReadX 13281 516 4096 4096
ReadX 13281 1844 4096 4096
ReadX 13281 1124 4096 4096
ReadX 13281 3136 4096 4096
ReadX 13281 324 4096 4096
ReadX 13281 1156 4096 4096
ReadX 13281 1172 4096 4096
ReadX 13281 2112 4096 4096
ReadX 13281 2368 4096 4096
ReadX 13281 964 4096 4096
ReadX 13281 980 4096 4096
ReadX 13281 1012 4096 4096
ReadX 13281 532 4096 4096
ReadX 13281 1876 4096 4096
QUERY_FS_INFORMATION 259
ReadX 13281 1620 4096 4096
ReadX 13281 1604 4096 4096
ReadX 13281 2116 4096 4096
ReadX 13281 2132 4096 4096
ReadX 13281 2148 4096 4096
ReadX 13281 2276 4096 4096
ReadX 13281 1540 4096 4096
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x2 13298
Close 13298
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN 0x40 0x2 13300
QUERY_FILE_INFORMATION 13265
WriteX 13300 4088 1 1
QUERY_FILE_INFORMATION 13300
QUERY_FILE_INFORMATION 13265
Close 13265
WriteX 13300 0 65471 65471
WriteX 13300 65471 65 65
WriteX 13300 65536 64850 64850
Close 13300
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x40 0x2 13302
WriteX 13302 15 1 1
QUERY_FILE_INFORMATION 13302
ReadX 13281 2068 4096 4096
ReadX 13281 1588 4096 4096
ReadX 13281 1572 4096 4096
WriteX 13302 0 18630 18630
Flush 13302
Close 13302
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Close 13292
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
Unlink \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP
NTCreateX \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP 0x200000 0x1 13303
Close 13303
Rename \clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP
NTCreateX \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP 0x40 0x1 13304
QUERY_FILE_INFORMATION 13304
QUERY_FILE_INFORMATION 13304
QUERY_FILE_INFORMATION 13304
ReadX 13304 661 24 24
ReadX 13304 659 356 356
ReadX 13304 659 14 14
ReadX 13304 659 7 7
ReadX 13304 659 12 12
ReadX 13304 659 8 8
ReadX 13304 659 15 15
ReadX 13304 659 16 16
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS
ReadX 13281 612 4096 4096
ReadX 13281 564 4096 4096
ReadX 13281 1876 4096 4096
ReadX 13281 628 4096 4096
ReadX 13281 740 4096 4096
ReadX 13281 724 4096 4096
ReadX 13281 644 4096 4096
ReadX 13281 2324 4096 4096
ReadX 13281 660 4096 4096
ReadX 13281 852 4096 4096
ReadX 13281 868 4096 4096
Close 13304
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS
Close 13279
ReadX 13281 2368 4096 4096
ReadX 13281 1024 4096 4096
ReadX 13281 320 4096 4096
ReadX 13281 580 4096 4096
ReadX 13281 3136 512 512
ReadX 13281 2880 4096 4096
Close 13281
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13305
WriteX 13305 0 65471 65471
WriteX 13305 65471 63 63
WriteX 13305 65534 65471 65471
WriteX 13305 131005 63 63
Close 13305
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13306
WriteX 13306 0 65471 65471
WriteX 13306 65471 63 63
WriteX 13306 65534 65471 65471
WriteX 13306 131005 63 63
WriteX 13306 131068 65471 65471
WriteX 13306 196539 63 63
WriteX 13306 196602 65471 65471
WriteX 13306 262073 63 63
Close 13306
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13307
WriteX 13307 0 65471 65471
WriteX 13307 65471 63 63
WriteX 13307 65534 65471 65471
WriteX 13307 131005 63 63
WriteX 13307 131068 65471 65471
WriteX 13307 196539 63 63
WriteX 13307 196602 65471 65471
WriteX 13307 262073 63 63
WriteX 13307 262136 65471 65471
WriteX 13307 327607 63 63
WriteX 13307 327670 65471 65471
WriteX 13307 393141 63 63
WriteX 13307 393204 65471 65471
WriteX 13307 458675 63 63
WriteX 13307 458738 65471 65471
WriteX 13307 524209 63 63
Close 13307
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13308
Close 13308
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13309
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13309 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13310
ReadX 13310 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13311
ReadX 13311 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13312
ReadX 13312 0 511 511
ReadX 13309 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13309
Close 13310
Close 13311
Close 13312
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13313
ReadX 13313 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13314
ReadX 13314 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13315
ReadX 13315 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13316
ReadX 13316 0 511 511
ReadX 13313 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S3CF99.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.DB 0x40 0x2 13317
FIND_FIRST \clients\client1\~dmtmp\*
Close 13317
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.DB 0x40 0x1 13318
QUERY_FILE_INFORMATION 13318
WriteX 13318 2047 1 1
QUERY_FILE_INFORMATION 13318
WriteX 13318 0 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x2 13319
Close 13319
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x1 13320
WriteX 13320 52 1 1
QUERY_FILE_INFORMATION 13320
WriteX 13320 0 53 53
WriteX 13320 53 28 28
WriteX 13320 81 4 4
WriteX 13320 85 28 28
WriteX 13320 113 38 38
WriteX 13320 151 28 28
WriteX 13320 179 2 2
WriteX 13320 181 28 28
WriteX 13320 209 3 3
WriteX 13320 212 279 279
WriteX 13320 9 4 4
Close 13320
NTCreateX \clients\client1\~dmtmp\PARADOX\__S31.VAL 0x40 0x1 13321
ReadX 13321 0 53 53
ReadX 13321 53 28 28
ReadX 13321 81 4 4
ReadX 13321 85 28 28
ReadX 13321 113 38 38
ReadX 13321 151 28 28
ReadX 13321 179 2 2
ReadX 13321 181 28 28
ReadX 13321 209 3 3
Close 13321
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
Close 13313
Close 13314
Close 13315
Close 13316
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13322
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13322 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13323
ReadX 13323 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13324
ReadX 13324 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13325
ReadX 13325 0 511 511
ReadX 13322 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x2 13327
Close 13327
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13328
WriteX 13328 52 1 1
QUERY_FILE_INFORMATION 13328
WriteX 13328 0 53 53
WriteX 13328 53 28 28
WriteX 13328 81 28 28
WriteX 13328 109 28 28
WriteX 13328 137 28 28
WriteX 13328 165 28 28
WriteX 13328 193 28 28
WriteX 13328 221 28 28
WriteX 13328 249 4 4
WriteX 13328 253 4 4
WriteX 13328 257 4 4
WriteX 13328 261 28 28
WriteX 13328 289 2 2
WriteX 13328 291 2 2
WriteX 13328 293 2 2
WriteX 13328 295 248 248
WriteX 13328 9 4 4
Close 13328
Close 13322
Close 13323
Close 13324
Close 13325
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13329
ReadX 13329 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13330
ReadX 13330 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13331
ReadX 13331 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13332
ReadX 13332 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13333
ReadX 13333 0 53 53
ReadX 13333 53 28 28
ReadX 13333 81 28 28
ReadX 13333 109 28 28
ReadX 13333 137 28 28
ReadX 13333 165 28 28
ReadX 13333 193 28 28
ReadX 13333 221 28 28
ReadX 13333 249 4 4
ReadX 13333 253 4 4
ReadX 13333 257 4 4
ReadX 13333 261 28 28
ReadX 13333 289 2 2
ReadX 13333 291 2 2
ReadX 13333 293 2 2
Close 13333
ReadX 13329 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13329
Close 13330
Close 13331
Close 13332
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.VAL
Unlink \clients\client1\~dmtmp\PARADOX\__S31.VAL
Close 13318
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__S31.DB
Unlink \clients\client1\~dmtmp\PARADOX\__S31.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13334
Close 13334
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13335
ReadX 13335 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13336
ReadX 13336 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13337
ReadX 13337 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13338
ReadX 13338 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13339
ReadX 13339 0 53 53
ReadX 13339 53 28 28
ReadX 13339 81 28 28
ReadX 13339 109 28 28
ReadX 13339 137 28 28
ReadX 13339 165 28 28
ReadX 13339 193 28 28
ReadX 13339 221 28 28
ReadX 13339 249 4 4
ReadX 13339 253 4 4
ReadX 13339 257 4 4
ReadX 13339 261 28 28
ReadX 13339 289 2 2
ReadX 13339 291 2 2
ReadX 13339 293 2 2
Close 13339
ReadX 13335 2048 2048 2048
Close 13335
Close 13336
Close 13337
Close 13338
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13340
ReadX 13340 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13341
ReadX 13341 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13342
ReadX 13342 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13343
ReadX 13343 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13344
ReadX 13344 0 53 53
ReadX 13344 53 28 28
ReadX 13344 81 28 28
ReadX 13344 109 28 28
ReadX 13344 137 28 28
ReadX 13344 165 28 28
ReadX 13344 193 28 28
ReadX 13344 221 28 28
ReadX 13344 249 4 4
ReadX 13344 253 4 4
ReadX 13344 257 4 4
ReadX 13344 261 28 28
ReadX 13344 289 2 2
ReadX 13344 291 2 2
ReadX 13344 293 2 2
Close 13344
ReadX 13340 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x2 13348
FIND_FIRST \clients\client1\~dmtmp\*
Close 13348
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 13349
QUERY_FILE_INFORMATION 13349
WriteX 13349 2047 1 1
QUERY_FILE_INFORMATION 13349
WriteX 13349 0 2048 2048
Close 13349
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 13350
ReadX 13350 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
Close 13350
Close 13340
Close 13341
Close 13342
Close 13343
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 13351
ReadX 13351 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
WriteX 13351 4095 1 1
QUERY_FILE_INFORMATION 13351
WriteX 13351 2048 2048 2048
QUERY_FILE_INFORMATION 13351
Flush 13351
WriteX 13351 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13352
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13352 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13353
ReadX 13353 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13354
ReadX 13354 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13355
ReadX 13355 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13356
ReadX 13356 0 53 53
ReadX 13356 53 28 28
ReadX 13356 81 28 28
ReadX 13356 109 28 28
ReadX 13356 137 28 28
ReadX 13356 165 28 28
ReadX 13356 193 28 28
ReadX 13356 221 28 28
ReadX 13356 249 4 4
ReadX 13356 253 4 4
ReadX 13356 257 4 4
ReadX 13356 261 28 28
ReadX 13356 289 2 2
ReadX 13356 291 2 2
ReadX 13356 293 2 2
Close 13356
ReadX 13352 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x2 13360
FIND_FIRST \clients\client1\~dmtmp\*
Close 13360
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 13361
QUERY_FILE_INFORMATION 13361
WriteX 13361 2047 1 1
QUERY_FILE_INFORMATION 13361
WriteX 13361 0 2048 2048
Close 13361
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 13362
ReadX 13362 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x2 13366
Close 13366
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 13367
QUERY_FILE_INFORMATION 13367
WriteX 13367 2047 1 1
QUERY_FILE_INFORMATION 13367
WriteX 13367 0 2048 2048
Close 13367
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 13368
ReadX 13368 0 511 511
ReadX 13352 384 2048 2048
ReadX 13352 768 16384 16384
ReadX 13352 1792 14336 14336
Close 13368
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 13369
ReadX 13369 0 511 511
Close 13369
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB 0x40 0x1 13371
Close 13371
Unlink \clients\client1\~dmtmp\PARADOX\ERRORCHG.DB
WriteX 13362 4095 1 1
QUERY_FILE_INFORMATION 13362
WriteX 13362 2048 2048 2048
WriteX 13362 0 88 88
Close 13362
WriteX 13352 1152 2048 2048
WriteX 13352 1408 6144 6144
WriteX 13352 1920 2048 2048
WriteX 13352 0 88 88
Close 13352
WriteX 13353 0 88 88
Close 13353
WriteX 13354 0 88 88
Close 13354
Close 13355
NTCreateX \clients\client1\~dmtmp\PARADOX\CHANGED.DB 0x40 0x1 13372
ReadX 13372 0 511 511
ReadX 13372 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\CHANGED.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13372
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\TIMECHG 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\TIMECHG 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13373
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13373 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13374
ReadX 13374 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13375
ReadX 13375 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13376
ReadX 13376 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13377
ReadX 13377 0 53 53
ReadX 13377 53 28 28
ReadX 13377 81 28 28
ReadX 13377 109 28 28
ReadX 13377 137 28 28
ReadX 13377 165 28 28
ReadX 13377 193 28 28
ReadX 13377 221 28 28
ReadX 13377 249 4 4
ReadX 13377 253 4 4
ReadX 13377 257 4 4
ReadX 13377 261 28 28
ReadX 13377 289 2 2
ReadX 13377 291 2 2
ReadX 13377 293 2 2
Close 13377
ReadX 13373 2048 2048 2048
Close 13373
Close 13374
Close 13375
Close 13376
Close 13351
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__3F2C4.DB 0x40 0x1 13378
QUERY_FILE_INFORMATION 13378
Close 13378
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
Unlink \clients\client1\~dmtmp\PARADOX\__3F2C4.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13379
Close 13379
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13380
ReadX 13380 0 511 511
ReadX 13380 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13381
ReadX 13381 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13382
ReadX 13382 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13383
ReadX 13383 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13384
ReadX 13384 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13385
ReadX 13385 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13386
ReadX 13386 0 53 53
ReadX 13386 53 2 2
ReadX 13386 55 2 2
ReadX 13386 57 184 184
ReadX 13386 241 298 298
Close 13386
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13387
ReadX 13387 0 41 41
ReadX 13380 2048 2048 2048
Close 13387
Close 13380
Close 13381
Close 13384
Close 13385
Close 13382
Close 13383
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13388
ReadX 13388 0 511 511
ReadX 13388 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13389
ReadX 13389 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13390
ReadX 13390 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13391
ReadX 13391 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13392
ReadX 13392 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13393
ReadX 13393 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13394
ReadX 13394 0 53 53
ReadX 13394 53 2 2
ReadX 13394 55 2 2
ReadX 13394 57 184 184
ReadX 13394 241 298 298
Close 13394
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13395
ReadX 13395 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13396
ReadX 13396 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13397
ReadX 13397 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13398
ReadX 13398 0 511 511
ReadX 13397 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13399
ReadX 13399 0 53 53
ReadX 13399 53 2 2
ReadX 13399 55 480 480
ReadX 13399 535 2 2
Close 13399
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13400
ReadX 13400 0 41 41
ReadX 13388 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x2 13404
FIND_FIRST \clients\client1\~dmtmp\*
Close 13404
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 13405
QUERY_FILE_INFORMATION 13405
WriteX 13405 2047 1 1
QUERY_FILE_INFORMATION 13405
WriteX 13405 0 2048 2048
Close 13405
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 13406
ReadX 13406 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Close 13406
Close 13395
Close 13396
Close 13397
Close 13398
Close 13400
Close 13388
Close 13389
Close 13392
Close 13393
Close 13390
Close 13391
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 13407
ReadX 13407 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13408
Close 13408
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13409
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13409 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13410
ReadX 13410 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13411
ReadX 13411 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13412
ReadX 13412 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13413
ReadX 13413 0 53 53
ReadX 13413 53 2 2
ReadX 13413 55 480 480
ReadX 13413 535 2 2
Close 13413
ReadX 13409 2048 2048 2048
Close 13409
Close 13410
Close 13411
Close 13412
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13414
ReadX 13414 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13415
ReadX 13415 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13416
ReadX 13416 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13417
ReadX 13417 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13418
ReadX 13418 0 53 53
ReadX 13418 53 2 2
ReadX 13418 55 480 480
ReadX 13418 535 2 2
Close 13418
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13419
ReadX 13419 0 511 511
ReadX 13419 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13420
ReadX 13420 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13421
ReadX 13421 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13422
ReadX 13422 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13423
ReadX 13423 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13424
ReadX 13424 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13425
ReadX 13425 0 41 41
ReadX 13419 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13426
ReadX 13426 0 53 53
ReadX 13426 53 2 2
ReadX 13426 55 2 2
ReadX 13426 57 184 184
ReadX 13426 241 298 298
Close 13426
ReadX 13414 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x2 13430
FIND_FIRST \clients\client1\~dmtmp\*
Close 13430
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 13431
QUERY_FILE_INFORMATION 13431
WriteX 13431 2047 1 1
QUERY_FILE_INFORMATION 13431
WriteX 13431 0 2048 2048
Close 13431
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 13432
ReadX 13432 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
Close 13432
Close 13425
Close 13419
Close 13420
Close 13423
Close 13424
Close 13421
Close 13422
Close 13414
Close 13415
Close 13416
Close 13417
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 13433
ReadX 13433 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
WriteX 13407 4095 1 1
QUERY_FILE_INFORMATION 13407
WriteX 13407 2048 2048 2048
QUERY_FILE_INFORMATION 13407
Flush 13407
WriteX 13407 0 88 88
WriteX 13433 4095 1 1
QUERY_FILE_INFORMATION 13433
WriteX 13433 2048 2048 2048
QUERY_FILE_INFORMATION 13433
Flush 13433
WriteX 13433 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13434
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13434 0 511 511
ReadX 13434 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13435
ReadX 13435 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13436
ReadX 13436 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13437
ReadX 13437 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13438
ReadX 13438 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13439
ReadX 13439 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13440
ReadX 13440 0 53 53
ReadX 13440 53 2 2
ReadX 13440 55 2 2
ReadX 13440 57 184 184
ReadX 13440 241 298 298
Close 13440
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13441
ReadX 13441 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13442
ReadX 13442 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13443
ReadX 13443 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13444
ReadX 13444 0 511 511
ReadX 13443 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13445
ReadX 13445 0 53 53
ReadX 13445 53 2 2
ReadX 13445 55 480 480
ReadX 13445 535 2 2
Close 13445
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13446
ReadX 13446 0 41 41
ReadX 13434 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13447
ReadX 13447 0 53 53
ReadX 13447 53 2 2
ReadX 13447 55 480 480
ReadX 13447 535 2 2
Close 13447
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13448
ReadX 13448 0 53 53
ReadX 13448 53 2 2
ReadX 13448 55 2 2
ReadX 13448 57 184 184
ReadX 13448 241 298 298
Close 13448
ReadX 13441 2048 2048 2048
ReadX 13442 2048 2048 2048
ReadX 13441 320 16384 16384
ReadX 13441 384 16384 16384
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x2 13449
FIND_FIRST \clients\client1\~dmtmp\*
Close 13449
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x1 13450
QUERY_FILE_INFORMATION 13450
WriteX 13450 4095 1 1
QUERY_FILE_INFORMATION 13450
WriteX 13450 0 4096 4096
Close 13450
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.MB 0x40 0x1 13451
ReadX 13451 0 41 41
Close 13441
Close 13442
Close 13443
Close 13444
Close 13446
Close 13434
Close 13435
Close 13438
Close 13439
Close 13436
Close 13437
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x2 13452
Close 13452
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 13453
QUERY_FILE_INFORMATION 13453
WriteX 13453 4095 1 1
QUERY_FILE_INFORMATION 13453
WriteX 13453 0 4096 4096
Close 13453
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 13454
ReadX 13454 0 41 41
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB4.FAM 0x40 0x1 -1
QUERY_FILE_INFORMATION 13451
ReadX 13451 0 4096 4096
WriteX 13454 0 4096 4096
Close 13454
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x40 0x1 13456
ReadX 13456 0 41 41
Close 13451
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__QB4.MB
Unlink \clients\client1\~dmtmp\PARADOX\__QB4.MB
Close 13456
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__QB5.MB
NTCreateX \clients\client1\~dmtmp\PARADOX\__QB5.MB 0x200000 0x1 13457
Close 13457
Rename \clients\client1\~dmtmp\PARADOX\__QB5.MB \clients\client1\~dmtmp\PARADOX\ANSWER.MB
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.MB 0x40 0x1 13458
ReadX 13458 0 41 41
Close 13458
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x2 13459
Close 13459
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13460
QUERY_FILE_INFORMATION 13460
WriteX 13460 2047 1 1
QUERY_FILE_INFORMATION 13460
WriteX 13460 0 2048 2048
Close 13460
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13461
ReadX 13461 0 511 511
ReadX 13461 0 572 572
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.MB 0x40 0x1 13462
ReadX 13462 0 41 41
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13462
Close 13461
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\CLASSROL 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13463
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13463 0 511 511
ReadX 13463 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13464
ReadX 13464 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13465
ReadX 13465 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13466
ReadX 13466 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13467
ReadX 13467 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13468
ReadX 13468 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13469
ReadX 13469 0 53 53
ReadX 13469 53 2 2
ReadX 13469 55 2 2
ReadX 13469 57 184 184
ReadX 13469 241 298 298
Close 13469
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13470
ReadX 13470 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13471
ReadX 13471 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13472
ReadX 13472 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13473
ReadX 13473 0 511 511
ReadX 13472 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13474
ReadX 13474 0 53 53
ReadX 13474 53 2 2
ReadX 13474 55 480 480
ReadX 13474 535 2 2
Close 13474
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13475
ReadX 13475 0 41 41
ReadX 13463 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13476
ReadX 13476 0 53 53
ReadX 13476 53 2 2
ReadX 13476 55 480 480
ReadX 13476 535 2 2
Close 13476
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13477
ReadX 13477 0 53 53
ReadX 13477 53 2 2
ReadX 13477 55 2 2
ReadX 13477 57 184 184
ReadX 13477 241 298 298
Close 13477
ReadX 13470 2048 2048 2048
Close 13470
Close 13471
Close 13472
Close 13473
Close 13475
Close 13463
Close 13464
Close 13467
Close 13468
Close 13465
Close 13466
Close 13407
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__40D6B.DB 0x40 0x1 13478
QUERY_FILE_INFORMATION 13478
Close 13478
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Unlink \clients\client1\~dmtmp\PARADOX\__40D6B.DB
Close 13433
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__414F2.DB 0x40 0x1 13479
QUERY_FILE_INFORMATION 13479
Close 13479
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__414F2.DB
Unlink \clients\client1\~dmtmp\PARADOX\__414F2.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13480
Close 13480
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ENROLL 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13481
ReadX 13481 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13482
ReadX 13482 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13483
ReadX 13483 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13484
ReadX 13484 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13485
ReadX 13485 0 53 53
ReadX 13485 53 2 2
ReadX 13485 55 480 480
ReadX 13485 535 2 2
Close 13485
ReadX 13481 2048 2048 2048
Close 13481
Close 13482
Close 13483
Close 13484
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13486
ReadX 13486 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13487
ReadX 13487 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13488
ReadX 13488 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13489
ReadX 13489 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13490
ReadX 13490 0 53 53
ReadX 13490 53 2 2
ReadX 13490 55 480 480
ReadX 13490 535 2 2
Close 13490
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13491
ReadX 13491 0 511 511
ReadX 13491 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13492
ReadX 13492 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13493
ReadX 13493 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13494
ReadX 13494 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13495
ReadX 13495 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13496
ReadX 13496 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13497
ReadX 13497 0 41 41
ReadX 13491 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13498
ReadX 13498 0 53 53
ReadX 13498 53 2 2
ReadX 13498 55 2 2
ReadX 13498 57 184 184
ReadX 13498 241 298 298
Close 13498
ReadX 13486 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x2 13502
FIND_FIRST \clients\client1\~dmtmp\*
Close 13502
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 13503
QUERY_FILE_INFORMATION 13503
WriteX 13503 2047 1 1
QUERY_FILE_INFORMATION 13503
WriteX 13503 0 2048 2048
Close 13503
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 13504
ReadX 13504 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
Close 13504
Close 13497
Close 13491
Close 13492
Close 13495
Close 13496
Close 13493
Close 13494
Close 13486
Close 13487
Close 13488
Close 13489
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 13505
ReadX 13505 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13506
Close 13506
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13507
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13507 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13508
ReadX 13508 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13509
ReadX 13509 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13510
ReadX 13510 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13511
ReadX 13511 0 53 53
ReadX 13511 53 28 28
ReadX 13511 81 28 28
ReadX 13511 109 28 28
ReadX 13511 137 28 28
ReadX 13511 165 28 28
ReadX 13511 193 28 28
ReadX 13511 221 28 28
ReadX 13511 249 4 4
ReadX 13511 253 4 4
ReadX 13511 257 4 4
ReadX 13511 261 28 28
ReadX 13511 289 2 2
ReadX 13511 291 2 2
ReadX 13511 293 2 2
Close 13511
ReadX 13507 2048 2048 2048
Close 13507
Close 13508
Close 13509
Close 13510
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13512
ReadX 13512 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13513
ReadX 13513 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13514
ReadX 13514 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13515
ReadX 13515 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13516
ReadX 13516 0 53 53
ReadX 13516 53 28 28
ReadX 13516 81 28 28
ReadX 13516 109 28 28
ReadX 13516 137 28 28
ReadX 13516 165 28 28
ReadX 13516 193 28 28
ReadX 13516 221 28 28
ReadX 13516 249 4 4
ReadX 13516 253 4 4
ReadX 13516 257 4 4
ReadX 13516 261 28 28
ReadX 13516 289 2 2
ReadX 13516 291 2 2
ReadX 13516 293 2 2
Close 13516
ReadX 13512 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x2 13520
FIND_FIRST \clients\client1\~dmtmp\*
Close 13520
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 13521
QUERY_FILE_INFORMATION 13521
WriteX 13521 2047 1 1
QUERY_FILE_INFORMATION 13521
WriteX 13521 0 2048 2048
Close 13521
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 13522
ReadX 13522 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
Close 13522
Close 13512
Close 13513
Close 13514
Close 13515
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 13523
ReadX 13523 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13524
Close 13524
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13525
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13525 0 511 511
ReadX 13525 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13526
ReadX 13526 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13527
ReadX 13527 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13528
ReadX 13528 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13529
ReadX 13529 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13530
ReadX 13530 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13531
ReadX 13531 0 53 53
ReadX 13531 53 2 2
ReadX 13531 55 2 2
ReadX 13531 57 184 184
ReadX 13531 241 298 298
Close 13531
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13532
ReadX 13532 0 41 41
ReadX 13525 2048 2048 2048
Close 13532
Close 13525
Close 13526
Close 13529
Close 13530
Close 13527
Close 13528
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13533
ReadX 13533 0 511 511
ReadX 13533 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13534
ReadX 13534 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13535
ReadX 13535 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13536
ReadX 13536 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13537
ReadX 13537 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13538
ReadX 13538 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13539
ReadX 13539 0 53 53
ReadX 13539 53 2 2
ReadX 13539 55 2 2
ReadX 13539 57 184 184
ReadX 13539 241 298 298
Close 13539
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13540
ReadX 13540 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13541
ReadX 13541 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13542
ReadX 13542 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13543
ReadX 13543 0 511 511
ReadX 13542 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13544
ReadX 13544 0 53 53
ReadX 13544 53 2 2
ReadX 13544 55 480 480
ReadX 13544 535 2 2
Close 13544
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13545
ReadX 13545 0 41 41
ReadX 13533 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x2 13549
FIND_FIRST \clients\client1\~dmtmp\*
Close 13549
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 13550
QUERY_FILE_INFORMATION 13550
WriteX 13550 2047 1 1
QUERY_FILE_INFORMATION 13550
WriteX 13550 0 2048 2048
Close 13550
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 13551
ReadX 13551 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
Close 13551
Close 13540
Close 13541
Close 13542
Close 13543
Close 13545
Close 13533
Close 13534
Close 13537
Close 13538
Close 13535
Close 13536
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 13552
ReadX 13552 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
WriteX 13505 4095 1 1
QUERY_FILE_INFORMATION 13505
WriteX 13505 2048 2048 2048
QUERY_FILE_INFORMATION 13505
Flush 13505
WriteX 13505 0 88 88
WriteX 13523 4095 1 1
QUERY_FILE_INFORMATION 13523
WriteX 13523 2048 2048 2048
QUERY_FILE_INFORMATION 13523
Flush 13523
WriteX 13523 0 88 88
WriteX 13552 4095 1 1
QUERY_FILE_INFORMATION 13552
WriteX 13552 2048 2048 2048
QUERY_FILE_INFORMATION 13552
Flush 13552
WriteX 13552 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13553
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13553 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13554
ReadX 13554 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13555
ReadX 13555 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13556
ReadX 13556 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13557
ReadX 13557 0 53 53
ReadX 13557 53 2 2
ReadX 13557 55 480 480
ReadX 13557 535 2 2
Close 13557
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13558
ReadX 13558 0 511 511
ReadX 13558 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13559
ReadX 13559 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13560
ReadX 13560 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13561
ReadX 13561 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13562
ReadX 13562 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13563
ReadX 13563 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13564
ReadX 13564 0 41 41
ReadX 13558 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13565
ReadX 13565 0 53 53
ReadX 13565 53 2 2
ReadX 13565 55 2 2
ReadX 13565 57 184 184
ReadX 13565 241 298 298
Close 13565
ReadX 13553 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13566
ReadX 13566 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13567
ReadX 13567 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13568
ReadX 13568 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13569
ReadX 13569 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13570
ReadX 13570 0 53 53
ReadX 13570 53 28 28
ReadX 13570 81 28 28
ReadX 13570 109 28 28
ReadX 13570 137 28 28
ReadX 13570 165 28 28
ReadX 13570 193 28 28
ReadX 13570 221 28 28
ReadX 13570 249 4 4
ReadX 13570 253 4 4
ReadX 13570 257 4 4
ReadX 13570 261 28 28
ReadX 13570 289 2 2
ReadX 13570 291 2 2
ReadX 13570 293 2 2
Close 13570
ReadX 13566 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13571
ReadX 13571 0 53 53
ReadX 13571 53 2 2
ReadX 13571 55 2 2
ReadX 13571 57 184 184
ReadX 13571 241 298 298
Close 13571
ReadX 13555 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13572
ReadX 13572 0 53 53
ReadX 13572 53 2 2
ReadX 13572 55 480 480
ReadX 13572 535 2 2
Close 13572
ReadX 13566 4096 16384 16384
ReadX 13566 1280 16384 16384
ReadX 13566 2304 6144 6144
ReadX 13566 2688 2048 2048
ReadX 13553 4096 16384 16384
ReadX 13553 1280 16384 16384
ReadX 13553 2304 16384 16384
ReadX 13553 3328 16384 16384
ReadX 13553 272 16384 16384
ReadX 13553 336 16384 16384
ReadX 13553 400 16384 16384
ReadX 13553 464 16384 16384
ReadX 13553 528 16384 16384
ReadX 13553 592 16384 16384
ReadX 13553 656 16384 16384
ReadX 13553 720 16384 16384
ReadX 13553 784 16384 16384
ReadX 13553 848 16384 16384
ReadX 13553 912 16384 16384
ReadX 13559 2048 2048 2048
ReadX 13558 760 2048 2048
ReadX 13558 1144 2048 2048
ReadX 13558 408 2048 2048
ReadX 13558 912 2048 2048
ReadX 13558 1096 2048 2048
ReadX 13558 776 2048 2048
ReadX 13558 560 2048 2048
ReadX 13558 376 2048 2048
ReadX 13558 320 2048 2048
ReadX 13558 3072 2048 2048
ReadX 13558 784 2048 2048
ReadX 13558 2176 2048 2048
ReadX 13558 792 2048 2048
ReadX 13558 576 2048 2048
ReadX 13558 600 2048 2048
ReadX 13558 728 2048 2048
ReadX 13558 1112 2048 2048
ReadX 13558 664 2048 2048
ReadX 13558 976 2048 2048
ReadX 13558 3840 2048 2048
ReadX 13558 296 2048 2048
ReadX 13558 480 2048 2048
ReadX 13558 680 2048 2048
ReadX 13558 696 2048 2048
ReadX 13558 832 2048 2048
ReadX 13558 1016 2048 2048
ReadX 13558 1104 2048 2048
ReadX 13558 3200 2048 2048
ReadX 13558 264 2048 2048
ReadX 13558 448 2048 2048
ReadX 13558 648 2048 2048
ReadX 13558 1136 2048 2048
ReadX 13558 288 2048 2048
ReadX 13558 352 2048 2048
ReadX 13558 536 2048 2048
ReadX 13558 800 2048 2048
ReadX 13558 736 2048 2048
ReadX 13558 392 2048 2048
ReadX 13558 752 2048 2048
ReadX 13558 880 2048 2048
ReadX 13558 1064 2048 2048
ReadX 13558 1128 2048 2048
ReadX 13558 1536 2048 2048
ReadX 13558 2432 2048 2048
ReadX 13558 688 2048 2048
ReadX 13558 872 2048 2048
ReadX 13558 1072 2048 2048
ReadX 13558 984 2048 2048
ReadX 13558 704 2048 2048
ReadX 13558 3328 2048 2048
ReadX 13558 888 2048 2048
ReadX 13558 496 2048 2048
ReadX 13558 624 2048 2048
ReadX 13558 808 2048 2048
ReadX 13558 1008 2048 2048
ReadX 13558 1152 2048 2048
ReadX 13558 416 2048 2048
ReadX 13558 584 2048 2048
ReadX 13558 384 2048 2048
ReadX 13558 568 2048 2048
ReadX 13558 512 2048 2048
ReadX 13558 1408 2048 2048
ReadX 13558 472 2048 2048
ReadX 13558 672 2048 2048
ReadX 13558 2560 2048 2048
ReadX 13558 544 2048 2048
ReadX 13558 920 2048 2048
ReadX 13558 1120 2048 2048
ReadX 13558 2304 2048 2048
ReadX 13558 1080 2048 2048
ReadX 13558 1664 2048 2048
ReadX 13558 608 2048 2048
ReadX 13558 2688 2048 2048
ReadX 13558 3712 2048 2048
ReadX 13558 616 2048 2048
ReadX 13558 632 2048 2048
ReadX 13558 944 2048 2048
ReadX 13558 856 2048 2048
ReadX 13558 768 2048 2048
ReadX 13558 720 2048 2048
ReadX 13558 640 2048 2048
ReadX 13558 1048 2048 2048
ReadX 13558 1040 2048 2048
ReadX 13558 1032 2048 2048
ReadX 13558 1000 2048 2048
ReadX 13558 992 2048 2048
ReadX 13558 968 2048 2048
ReadX 13558 952 2048 2048
ReadX 13558 1056 2048 2048
ReadX 13558 816 2048 2048
ReadX 13558 864 2048 2048
ReadX 13558 2816 2048 2048
ReadX 13558 640 2048 2048
ReadX 13558 1024 2048 2048
ReadX 13558 504 2048 2048
ReadX 13558 424 2048 2048
ReadX 13558 840 2048 2048
ReadX 13558 896 2048 2048
ReadX 13558 520 2048 2048
ReadX 13558 960 2048 2048
ReadX 13558 552 2048 2048
ReadX 13558 488 2048 2048
ReadX 13558 824 2048 2048
ReadX 13558 304 2048 2048
ReadX 13558 768 2048 2048
ReadX 13558 712 2048 2048
ReadX 13558 512 2048 2048
ReadX 13558 432 2048 2048
ReadX 13558 384 2048 2048
ReadX 13558 2944 2048 2048
ReadX 13558 1088 2048 2048
ReadX 13558 928 2048 2048
ReadX 13558 280 2048 2048
ReadX 13558 744 2048 2048
ReadX 13558 3968 2048 2048
ReadX 13558 336 2048 2048
ReadX 13558 592 2048 2048
ReadX 13558 312 2048 2048
ReadX 13558 400 2048 2048
ReadX 13558 904 2048 2048
ReadX 13558 464 2048 2048
ReadX 13558 3456 2048 2048
ReadX 13558 848 2048 2048
ReadX 13558 936 2048 2048
ReadX 13558 656 2048 2048
ReadX 13558 344 2048 2048
ReadX 13558 440 2048 2048
ReadX 13558 4096 2048 2048
ReadX 13558 528 2048 2048
ReadX 13558 2048 2048 2048
ReadX 13558 1024 2048 2048
ReadX 13558 456 2048 2048
ReadX 13558 1792 2048 2048
ReadX 13558 1152 2048 2048
ReadX 13558 3584 2048 2048
ReadX 13558 1920 2048 2048
ReadX 13558 1280 2048 2048
ReadX 13558 896 2048 2048
ReadX 13558 328 2048 2048
Close 13566
Close 13567
Close 13568
Close 13569
Close 13564
Close 13558
Close 13559
Close 13562
Close 13563
Close 13560
Close 13561
Close 13553
Close 13554
Close 13555
Close 13556
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13573
FIND_FIRST \clients\client1\~dmtmp\*
Close 13573
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13574
QUERY_FILE_INFORMATION 13574
WriteX 13574 0 2048 2048
WriteX 13574 18431 1 1
QUERY_FILE_INFORMATION 13574
WriteX 13574 2048 16384 16384
WriteX 13574 1152 16384 16384
WriteX 13574 2176 16384 16384
WriteX 13574 3200 16384 16384
WriteX 13574 264 16384 16384
WriteX 13574 328 16384 16384
WriteX 13574 392 16384 16384
WriteX 13574 456 16384 16384
WriteX 13574 520 16384 16384
WriteX 13574 584 16384 16384
WriteX 13574 648 16384 16384
WriteX 13574 712 16384 16384
WriteX 13574 776 16384 16384
WriteX 13574 840 16384 16384
WriteX 13574 904 16384 16384
WriteX 13574 968 16384 16384
WriteX 13574 1032 16384 16384
WriteX 13574 1096 16384 16384
WriteX 13574 1160 16384 16384
WriteX 13574 1224 16384 16384
WriteX 13574 1288 16384 16384
WriteX 13574 1352 16384 16384
WriteX 13574 1416 16384 16384
WriteX 13574 1480 16384 16384
WriteX 13574 1544 16384 16384
WriteX 13574 1608 16384 16384
WriteX 13574 1672 16384 16384
WriteX 13574 1736 16384 16384
WriteX 13574 1800 16384 16384
WriteX 13574 1864 16384 16384
WriteX 13574 1928 16384 16384
WriteX 13574 1992 16384 16384
WriteX 13574 2056 16384 16384
WriteX 13574 2120 16384 16384
WriteX 13574 2184 16384 16384
WriteX 13574 2248 16384 16384
WriteX 13574 2312 16384 16384
WriteX 13574 2376 16384 16384
WriteX 13574 2440 16384 16384
WriteX 13574 0 88 88
Close 13574
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13575
ReadX 13575 0 511 511
ReadX 13575 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13575
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\SCHED 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\SCHED 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13576
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13576 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13577
ReadX 13577 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13578
ReadX 13578 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13579
ReadX 13579 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13580
ReadX 13580 0 53 53
ReadX 13580 53 2 2
ReadX 13580 55 480 480
ReadX 13580 535 2 2
Close 13580
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13581
ReadX 13581 0 511 511
ReadX 13581 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13582
ReadX 13582 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13583
ReadX 13583 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13584
ReadX 13584 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13585
ReadX 13585 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13586
ReadX 13586 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13587
ReadX 13587 0 41 41
ReadX 13581 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13588
ReadX 13588 0 53 53
ReadX 13588 53 2 2
ReadX 13588 55 2 2
ReadX 13588 57 184 184
ReadX 13588 241 298 298
Close 13588
ReadX 13576 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13589
ReadX 13589 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13590
ReadX 13590 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13591
ReadX 13591 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13592
ReadX 13592 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13593
ReadX 13593 0 53 53
ReadX 13593 53 28 28
ReadX 13593 81 28 28
ReadX 13593 109 28 28
ReadX 13593 137 28 28
ReadX 13593 165 28 28
ReadX 13593 193 28 28
ReadX 13593 221 28 28
ReadX 13593 249 4 4
ReadX 13593 253 4 4
ReadX 13593 257 4 4
ReadX 13593 261 28 28
ReadX 13593 289 2 2
ReadX 13593 291 2 2
ReadX 13593 293 2 2
Close 13593
ReadX 13589 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13594
ReadX 13594 0 53 53
ReadX 13594 53 2 2
ReadX 13594 55 2 2
ReadX 13594 57 184 184
ReadX 13594 241 298 298
Close 13594
ReadX 13578 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13595
ReadX 13595 0 53 53
ReadX 13595 53 2 2
ReadX 13595 55 480 480
ReadX 13595 535 2 2
Close 13595
Close 13589
Close 13590
Close 13591
Close 13592
Close 13587
Close 13581
Close 13582
Close 13585
Close 13586
Close 13583
Close 13584
Close 13576
Close 13577
Close 13578
Close 13579
Close 13505
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__42B96.DB 0x40 0x1 13596
QUERY_FILE_INFORMATION 13596
Close 13596
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__42B96.DB
Unlink \clients\client1\~dmtmp\PARADOX\__42B96.DB
Close 13523
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__43212.DB 0x40 0x1 13597
QUERY_FILE_INFORMATION 13597
Close 13597
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43212.DB
Unlink \clients\client1\~dmtmp\PARADOX\__43212.DB
Close 13552
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__43904.DB 0x40 0x1 13598
QUERY_FILE_INFORMATION 13598
Close 13598
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__43904.DB
Unlink \clients\client1\~dmtmp\PARADOX\__43904.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13599
Close 13599
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES 1
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13600
ReadX 13600 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13601
ReadX 13601 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13602
ReadX 13602 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13603
ReadX 13603 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13604
ReadX 13604 0 53 53
ReadX 13604 53 28 28
ReadX 13604 81 28 28
ReadX 13604 109 28 28
ReadX 13604 137 28 28
ReadX 13604 165 28 28
ReadX 13604 193 28 28
ReadX 13604 221 28 28
ReadX 13604 249 4 4
ReadX 13604 253 4 4
ReadX 13604 257 4 4
ReadX 13604 261 28 28
ReadX 13604 289 2 2
ReadX 13604 291 2 2
ReadX 13604 293 2 2
Close 13604
ReadX 13600 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
ReadX 13600 384 2048 2048
ReadX 13600 768 16384 16384
ReadX 13600 1792 14336 14336
ReadX 13603 2048 2048 2048
ReadX 13602 2048 2048 2048
WriteX 13600 1152 2048 2048
WriteX 13603 2048 2048 2048
WriteX 13602 2048 2048 2048
WriteX 13600 0 88 88
WriteX 13601 0 88 88
WriteX 13602 0 88 88
WriteX 13603 0 88 88
Close 13600
Close 13601
Close 13602
Close 13603
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13605
Close 13605
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13606
ReadX 13606 0 511 511
ReadX 13606 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13607
ReadX 13607 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13608
ReadX 13608 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13609
ReadX 13609 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13610
ReadX 13610 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13611
ReadX 13611 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13612
ReadX 13612 0 53 53
ReadX 13612 53 2 2
ReadX 13612 55 2 2
ReadX 13612 57 184 184
ReadX 13612 241 298 298
Close 13612
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13613
ReadX 13613 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13614
ReadX 13614 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13615
ReadX 13615 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13616
ReadX 13616 0 511 511
ReadX 13615 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13617
ReadX 13617 0 53 53
ReadX 13617 53 2 2
ReadX 13617 55 480 480
ReadX 13617 535 2 2
Close 13617
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13618
ReadX 13618 0 41 41
ReadX 13606 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.TV
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.TV 0x40 0x1 13619
QUERY_FILE_INFORMATION 13619
QUERY_FILE_INFORMATION 13619
ReadX 13619 0 8192 8192
Close 13619
ReadX 13606 1152 2048 2048
ReadX 13606 4096 16384 16384
Close 13613
Close 13614
Close 13615
Close 13616
Close 13618
Close 13606
Close 13607
Close 13610
Close 13611
Close 13608
Close 13609
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\PXTOOLS.FT 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 13620
Close 13620
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 13621
QUERY_FILE_INFORMATION 13621
ReadX 13621 0 64 64
ReadX 13621 144 64 64
ReadX 13621 224 156 156
ReadX 13621 1193 128 128
ReadX 13621 1201 128 128
ReadX 13621 1072 4 4
ReadX 13621 1076 1925 1925
ReadX 13621 758 4 4
ReadX 13621 762 4557 4557
ReadX 13621 1052 4 4
ReadX 13621 1056 314 314
ReadX 13621 1056 11056 11056
Close 13621
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13622
ReadX 13622 0 511 511
ReadX 13622 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13623
ReadX 13623 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13624
ReadX 13624 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13625
ReadX 13625 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13626
ReadX 13626 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13627
ReadX 13627 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13628
ReadX 13628 0 53 53
ReadX 13628 53 2 2
ReadX 13628 55 2 2
ReadX 13628 57 184 184
ReadX 13628 241 298 298
Close 13628
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13629
ReadX 13629 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13630
ReadX 13630 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13631
ReadX 13631 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13632
ReadX 13632 0 511 511
ReadX 13631 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13633
ReadX 13633 0 53 53
ReadX 13633 53 2 2
ReadX 13633 55 480 480
ReadX 13633 535 2 2
Close 13633
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13634
ReadX 13634 0 41 41
ReadX 13622 2048 2048 2048
ReadX 13623 2048 2048 2048
ReadX 13622 1144 2048 2048
ReadX 13622 1152 2048 2048
ReadX 13622 4096 16384 16384
WriteX 13622 2048 2048 2048
WriteX 13623 2048 2048 2048
WriteX 13622 0 88 88
WriteX 13623 0 88 88
Close 13629
Close 13630
Close 13631
Close 13632
Close 13634
Close 13622
Close 13623
Close 13626
Close 13627
Close 13624
Close 13625
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\COURSES.FSL
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FSL 0x40 0x1 13635
Close 13635
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.FSL 0x40 0x1 13636
QUERY_FILE_INFORMATION 13636
ReadX 13636 0 64 64
ReadX 13636 144 64 64
ReadX 13636 224 84 84
ReadX 13636 478 16 16
ReadX 13636 1056 6176 6176
Close 13636
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.DB 0x40 0x1 13637
ReadX 13637 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.PX 0x40 0x1 13638
ReadX 13638 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.X04 0x40 0x1 13639
ReadX 13639 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.Y04 0x40 0x1 13640
ReadX 13640 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\COURSES.VAL 0x40 0x1 13641
ReadX 13641 0 53 53
ReadX 13641 53 28 28
ReadX 13641 81 28 28
ReadX 13641 109 28 28
ReadX 13641 137 28 28
ReadX 13641 165 28 28
ReadX 13641 193 28 28
ReadX 13641 221 28 28
ReadX 13641 249 4 4
ReadX 13641 253 4 4
ReadX 13641 257 4 4
ReadX 13641 261 28 28
ReadX 13641 289 2 2
ReadX 13641 291 2 2
ReadX 13641 293 2 2
Close 13641
ReadX 13637 2048 2048 2048
ReadX 13638 2048 2048 2048
ReadX 13637 1280 2048 2048
ReadX 13640 2048 2048 2048
ReadX 13639 2048 2048 2048
WriteX 13637 1280 2048 2048
WriteX 13640 2048 2048 2048
WriteX 13639 2048 2048 2048
WriteX 13638 2048 2048 2048
WriteX 13637 0 88 88
WriteX 13638 0 88 88
WriteX 13639 0 88 88
WriteX 13640 0 88 88
WriteX 13637 1280 2048 2048
WriteX 13640 2048 2048 2048
WriteX 13639 2048 2048 2048
WriteX 13638 2048 2048 2048
WriteX 13637 0 88 88
WriteX 13638 0 88 88
WriteX 13639 0 88 88
WriteX 13640 0 88 88
WriteX 13637 1280 2048 2048
WriteX 13640 2048 2048 2048
WriteX 13639 2048 2048 2048
WriteX 13638 2048 2048 2048
WriteX 13637 0 88 88
WriteX 13638 0 88 88
WriteX 13639 0 88 88
WriteX 13640 0 88 88
Close 13637
Close 13638
Close 13639
Close 13640
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13642
ReadX 13642 0 511 511
ReadX 13642 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13643
ReadX 13643 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13644
ReadX 13644 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13645
ReadX 13645 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13646
ReadX 13646 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13647
ReadX 13647 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13648
ReadX 13648 0 53 53
ReadX 13648 53 2 2
ReadX 13648 55 2 2
ReadX 13648 57 184 184
ReadX 13648 241 298 298
Close 13648
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13649
ReadX 13649 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13650
ReadX 13650 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13651
ReadX 13651 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13652
ReadX 13652 0 511 511
ReadX 13651 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13653
ReadX 13653 0 53 53
ReadX 13653 53 2 2
ReadX 13653 55 480 480
ReadX 13653 535 2 2
Close 13653
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13654
ReadX 13654 0 41 41
ReadX 13642 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x2 13658
FIND_FIRST \clients\client1\~dmtmp\*
Close 13658
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 13659
QUERY_FILE_INFORMATION 13659
WriteX 13659 2047 1 1
QUERY_FILE_INFORMATION 13659
WriteX 13659 0 2048 2048
Close 13659
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 13660
ReadX 13660 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
WriteX 13660 4095 1 1
QUERY_FILE_INFORMATION 13660
WriteX 13660 2048 2048 2048
WriteX 13660 0 88 88
Close 13660
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 13661
ReadX 13661 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
ReadX 13661 2048 2048 2048
Close 13649
Close 13650
Close 13651
Close 13652
Close 13654
Close 13642
Close 13643
Close 13646
Close 13647
Close 13644
Close 13645
WriteX 13661 2048 2048 2048
WriteX 13661 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13662
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13662 0 511 511
ReadX 13662 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13663
ReadX 13663 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13664
ReadX 13664 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13665
ReadX 13665 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13666
ReadX 13666 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13667
ReadX 13667 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13668
ReadX 13668 0 53 53
ReadX 13668 53 2 2
ReadX 13668 55 2 2
ReadX 13668 57 184 184
ReadX 13668 241 298 298
Close 13668
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13669
ReadX 13669 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13670
ReadX 13670 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13671
ReadX 13671 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13672
ReadX 13672 0 511 511
ReadX 13671 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13673
ReadX 13673 0 53 53
ReadX 13673 53 2 2
ReadX 13673 55 480 480
ReadX 13673 535 2 2
Close 13673
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13674
ReadX 13674 0 41 41
ReadX 13662 2048 2048 2048
ReadX 13662 1152 2048 2048
ReadX 13662 4096 16384 16384
ReadX 13662 1280 16384 16384
ReadX 13662 2304 16384 16384
ReadX 13662 3328 16384 16384
ReadX 13662 272 16384 16384
ReadX 13662 336 16384 16384
ReadX 13662 400 16384 16384
ReadX 13662 464 16384 16384
ReadX 13662 528 16384 16384
ReadX 13662 592 16384 16384
ReadX 13662 656 16384 16384
ReadX 13662 720 16384 16384
ReadX 13662 784 16384 16384
ReadX 13662 848 16384 16384
ReadX 13662 912 16384 16384
ReadX 13662 976 16384 16384
ReadX 13662 1040 16384 16384
ReadX 13662 1104 12288 12288
Close 13669
Close 13670
Close 13671
Close 13672
Close 13674
Close 13662
Close 13663
Close 13666
Close 13667
Close 13664
Close 13665
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13675
FIND_FIRST \clients\client1\~dmtmp\*
Close 13675
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13676
QUERY_FILE_INFORMATION 13676
WriteX 13676 0 2048 2048
WriteX 13676 2048 4096 4096
WriteX 13676 0 88 88
Close 13676
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13677
ReadX 13677 0 511 511
ReadX 13677 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13677
WriteX 13661 2048 2048 2048
WriteX 13661 0 88 88
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13678
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13678 0 511 511
ReadX 13678 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13679
ReadX 13679 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13680
ReadX 13680 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13681
ReadX 13681 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13682
ReadX 13682 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13683
ReadX 13683 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13684
ReadX 13684 0 53 53
ReadX 13684 53 2 2
ReadX 13684 55 2 2
ReadX 13684 57 184 184
ReadX 13684 241 298 298
Close 13684
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13685
ReadX 13685 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13686
ReadX 13686 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13687
ReadX 13687 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13688
ReadX 13688 0 511 511
ReadX 13687 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13689
ReadX 13689 0 53 53
ReadX 13689 53 2 2
ReadX 13689 55 480 480
ReadX 13689 535 2 2
Close 13689
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13690
ReadX 13690 0 41 41
ReadX 13678 2048 2048 2048
ReadX 13678 1152 2048 2048
ReadX 13678 4096 16384 16384
ReadX 13678 1280 16384 16384
ReadX 13678 2304 16384 16384
ReadX 13678 3328 16384 16384
ReadX 13678 272 16384 16384
ReadX 13678 336 16384 16384
ReadX 13678 400 16384 16384
ReadX 13678 464 16384 16384
ReadX 13678 528 16384 16384
ReadX 13678 592 16384 16384
ReadX 13678 656 16384 16384
ReadX 13678 720 16384 16384
ReadX 13678 784 16384 16384
ReadX 13678 848 16384 16384
ReadX 13678 912 16384 16384
ReadX 13678 976 16384 16384
ReadX 13678 1040 16384 16384
ReadX 13678 1104 12288 12288
Close 13685
Close 13686
Close 13687
Close 13688
Close 13690
Close 13678
Close 13679
Close 13682
Close 13683
Close 13680
Close 13681
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13691
FIND_FIRST \clients\client1\~dmtmp\*
Close 13691
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13692
QUERY_FILE_INFORMATION 13692
WriteX 13692 0 2048 2048
WriteX 13692 2048 4096 4096
WriteX 13692 0 88 88
Close 13692
NTCreateX \clients\client1\~dmtmp\PARADOX\ANSWER.DB 0x40 0x1 13693
ReadX 13693 0 511 511
ReadX 13693 2048 4096 4096
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\ANSWER.TV 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\DEFAULT.TV 1
Close 13693
Close 13661
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__50172.DB 0x40 0x1 13694
QUERY_FILE_INFORMATION 13694
Close 13694
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__50172.DB
Unlink \clients\client1\~dmtmp\PARADOX\__50172.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 13695
Close 13695
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\STUDENTS 1
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.FSL 0x40 0x1 13696
QUERY_FILE_INFORMATION 13696
ReadX 13696 0 64 64
ReadX 13696 144 64 64
ReadX 13696 224 156 156
ReadX 13696 1193 128 128
ReadX 13696 1201 128 128
ReadX 13696 1072 4 4
ReadX 13696 1076 1925 1925
ReadX 13696 758 4 4
ReadX 13696 762 4557 4557
ReadX 13696 1052 4 4
ReadX 13696 1056 314 314
ReadX 13696 1056 11056 11056
Close 13696
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13697
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13697 0 511 511
ReadX 13697 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13698
ReadX 13698 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13699
ReadX 13699 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13700
ReadX 13700 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13701
ReadX 13701 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13702
ReadX 13702 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13703
ReadX 13703 0 53 53
ReadX 13703 53 2 2
ReadX 13703 55 2 2
ReadX 13703 57 184 184
ReadX 13703 241 298 298
Close 13703
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13704
ReadX 13704 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13705
ReadX 13705 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13706
ReadX 13706 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13707
ReadX 13707 0 511 511
ReadX 13706 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13708
ReadX 13708 0 53 53
ReadX 13708 53 2 2
ReadX 13708 55 480 480
ReadX 13708 535 2 2
Close 13708
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13709
ReadX 13709 0 41 41
ReadX 13697 2048 2048 2048
ReadX 13697 1152 2048 2048
ReadX 13697 4096 16384 16384
Close 13704
Close 13705
Close 13706
Close 13707
Close 13709
Close 13697
Close 13698
Close 13701
Close 13702
Close 13699
Close 13700
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\QUENRD 1
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\QUENRD 1
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13710
ReadX 13710 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13711
ReadX 13711 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13712
ReadX 13712 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13713
ReadX 13713 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13714
ReadX 13714 0 53 53
ReadX 13714 53 2 2
ReadX 13714 55 480 480
ReadX 13714 535 2 2
Close 13714
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13715
ReadX 13715 0 511 511
ReadX 13715 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13716
ReadX 13716 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13717
ReadX 13717 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13718
ReadX 13718 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13719
ReadX 13719 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13720
ReadX 13720 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13721
ReadX 13721 0 41 41
ReadX 13715 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13722
ReadX 13722 0 53 53
ReadX 13722 53 2 2
ReadX 13722 55 2 2
ReadX 13722 57 184 184
ReadX 13722 241 298 298
Close 13722
ReadX 13710 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x2 13726
FIND_FIRST \clients\client1\~dmtmp\*
Close 13726
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 13727
QUERY_FILE_INFORMATION 13727
WriteX 13727 2047 1 1
QUERY_FILE_INFORMATION 13727
WriteX 13727 0 2048 2048
Close 13727
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 13728
ReadX 13728 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
WriteX 13728 4095 1 1
QUERY_FILE_INFORMATION 13728
WriteX 13728 2048 2048 2048
WriteX 13728 0 88 88
Close 13728
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 13729
ReadX 13729 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
ReadX 13729 2048 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB 1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.FAM 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x2 13733
Close 13733
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 13734
QUERY_FILE_INFORMATION 13734
WriteX 13734 2047 1 1
QUERY_FILE_INFORMATION 13734
WriteX 13734 0 2048 2048
Close 13734
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 13735
ReadX 13735 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
WriteX 13735 4095 1 1
QUERY_FILE_INFORMATION 13735
WriteX 13735 2048 2048 2048
WriteX 13735 0 88 88
Close 13735
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 13736
ReadX 13736 0 511 511
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
ReadX 13736 2048 2048 2048
Close 13721
Close 13715
Close 13716
Close 13719
Close 13720
Close 13717
Close 13718
Close 13710
Close 13711
Close 13712
Close 13713
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.DB 0x40 0x1 13737
FIND_FIRST \clients\client1\~dmtmp\*
ReadX 13737 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.PX 0x40 0x1 13738
ReadX 13738 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.X03 0x40 0x1 13739
ReadX 13739 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.Y03 0x40 0x1 13740
ReadX 13740 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\ENROLL.VAL 0x40 0x1 13741
ReadX 13741 0 53 53
ReadX 13741 53 2 2
ReadX 13741 55 480 480
ReadX 13741 535 2 2
Close 13741
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.DB 0x40 0x1 13742
ReadX 13742 0 511 511
ReadX 13742 0 530 530
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.PX 0x40 0x1 13743
ReadX 13743 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG0 0x40 0x1 13744
ReadX 13744 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG0 0x40 0x1 13745
ReadX 13745 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.XG1 0x40 0x1 13746
ReadX 13746 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.YG1 0x40 0x1 13747
ReadX 13747 0 511 511
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.MB 0x40 0x1 13748
ReadX 13748 0 41 41
ReadX 13742 2048 2048 2048
NTCreateX \clients\client1\~dmtmp\PARADOX\STUDENTS.VAL 0x40 0x1 13749
ReadX 13749 0 53 53
ReadX 13749 53 2 2
ReadX 13749 55 2 2
ReadX 13749 57 184 184
ReadX 13749 241 298 298
Close 13749
ReadX 13737 2048 2048 2048
ReadX 13737 384 16384 16384
ReadX 13737 1408 16384 16384
ReadX 13737 2560 16384 16384
ReadX 13737 3584 16384 16384
ReadX 13737 288 16384 16384
ReadX 13737 352 16384 16384
ReadX 13737 416 16384 16384
ReadX 13737 480 16384 16384
ReadX 13737 552 16384 16384
ReadX 13737 616 16384 16384
ReadX 13737 680 16384 16384
ReadX 13737 744 16384 16384
ReadX 13737 808 16384 16384
ReadX 13737 872 16384 16384
ReadX 13737 936 10240 10240
Close 13748
Close 13742
Close 13743
Close 13746
Close 13747
Close 13744
Close 13745
Close 13737
Close 13738
Close 13739
Close 13740
Close 13729
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__52E2B.DB 0x40 0x1 13750
QUERY_FILE_INFORMATION 13750
Close 13750
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52E2B.DB
Unlink \clients\client1\~dmtmp\PARADOX\__52E2B.DB
Close 13736
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
NTCreateX \clients\client1\~dmtmp\PARADOX\__52EF7.DB 0x40 0x1 13751
QUERY_FILE_INFORMATION 13751
Close 13751
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PARADOX\__52EF7.DB
Unlink \clients\client1\~dmtmp\PARADOX\__52EF7.DB
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13752
ReadX 13752 0 65471 65471
ReadX 13752 65471 63 63
ReadX 13752 65534 65471 65471
ReadX 13752 131005 63 63
ReadX 13752 131068 65471 65471
ReadX 13752 196539 63 63
ReadX 13752 196602 65471 65471
ReadX 13752 262073 63 63
ReadX 13752 262136 65471 65471
ReadX 13752 327607 63 63
ReadX 13752 327670 10 10
Close 13752
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13753
ReadX 13753 0 65471 65471
ReadX 13753 65471 63 63
ReadX 13753 65534 65471 65471
ReadX 13753 131005 63 63
ReadX 13753 131068 65471 65471
ReadX 13753 196539 63 63
ReadX 13753 196602 65471 65471
ReadX 13753 262073 63 63
ReadX 13753 262136 65471 65471
ReadX 13753 327607 63 63
ReadX 13753 327670 65471 65471
ReadX 13753 393141 63 63
ReadX 13753 393204 65471 65471
ReadX 13753 458675 63 63
ReadX 13753 458738 65471 65471
ReadX 13753 524209 63 63
ReadX 13753 524272 65471 65471
ReadX 13753 589743 63 63
ReadX 13753 589806 65471 65471
ReadX 13753 655277 63 63
ReadX 13753 655340 32 32
Close 13753
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13754
ReadX 13754 0 65471 65471
ReadX 13754 65471 63 63
ReadX 13754 65534 65471 65471
ReadX 13754 131005 63 63
ReadX 13754 131068 65471 65471
ReadX 13754 196539 63 63
ReadX 13754 196602 65471 65471
ReadX 13754 262073 63 63
ReadX 13754 262136 65471 65471
ReadX 13754 327607 63 63
ReadX 13754 327670 65471 65471
ReadX 13754 393141 63 63
ReadX 13754 393204 65471 65471
ReadX 13754 458675 63 63
ReadX 13754 458738 65471 65471
ReadX 13754 524209 63 63
ReadX 13754 524272 65471 65471
ReadX 13754 589743 63 63
ReadX 13754 589806 65471 65471
ReadX 13754 655277 63 63
ReadX 13754 655340 65471 65471
ReadX 13754 720811 63 63
ReadX 13754 720874 65471 65471
ReadX 13754 786345 63 63
ReadX 13754 786408 65471 65471
ReadX 13754 851879 63 63
ReadX 13754 851942 65471 65471
ReadX 13754 917413 63 63
ReadX 13754 917476 65471 65471
ReadX 13754 982947 63 63
ReadX 13754 983010 65471 65471
ReadX 13754 1048481 63 63
ReadX 13754 1048544 65471 65471
ReadX 13754 1114015 63 63
ReadX 13754 1114078 65471 65471
ReadX 13754 1179549 63 63
ReadX 13754 1179612 65471 65471
ReadX 13754 1245083 63 63
ReadX 13754 1245146 65471 65471
ReadX 13754 1310617 63 63
ReadX 13754 1310680 65471 65471
ReadX 13754 1376151 63 63
ReadX 13754 1376214 65471 65471
ReadX 13754 1441685 63 63
ReadX 13754 1441748 65471 65471
ReadX 13754 1507219 63 63
ReadX 13754 1507282 65471 65471
ReadX 13754 1572753 63 63
ReadX 13754 1572816 65471 65471
ReadX 13754 1638287 63 63
ReadX 13754 1638350 65471 65471
ReadX 13754 1703821 63 63
ReadX 13754 1703884 65471 65471
ReadX 13754 1769355 63 63
ReadX 13754 1769418 65471 65471
ReadX 13754 1834889 63 63
ReadX 13754 1834952 32824 32824
Close 13754
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TEMPLATES 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\STARTUP 1
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\CHAP10 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\CHAP10.DOC 
NTCreateX \clients\client1\~dmtmp\WORD\CHAP10.DOC 0x40 0x1 13755
QUERY_FILE_INFORMATION 13755
ReadX 13755 0 512 512
ReadX 13755 512 512 512
ReadX 13755 1024 512 512
QUERY_FILE_INFORMATION 13755
QUERY_FILE_INFORMATION 13755
ReadX 13755 2560 2048 2048
ReadX 13755 1984 2048 2048
NTCreateX \clients\client1\~dmtmp\WORD\~$CHAP10.DOC 0x40 0x2 13756
WriteX 13756 52 1 1
QUERY_FILE_INFORMATION 13756
WriteX 13756 0 53 53
Close 13756
ReadX 13755 2208 650 650
ReadX 13755 1920 2048 2048
ReadX 13755 2112 2048 2048
ReadX 13755 1856 2048 2048
ReadX 13755 1824 2048 2048
ReadX 13755 1536 512 512
ReadX 13755 1632 1536 1536
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT 1
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x2 13757
Close 13757
Unlink \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
ReadX 13755 1568 512 512
ReadX 13755 1536 512 512
ReadX 13755 2176 384 384
ReadX 13755 1600 416 416
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x40 0x2 13758
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC 1
ReadX 13755 288 2048 2048
ReadX 13755 2336 2048 2048
ReadX 13755 4384 2048 2048
ReadX 13755 6432 2048 2048
ReadX 13755 8480 2048 2048
ReadX 13755 10528 2048 2048
ReadX 13755 12576 2048 2048
WriteX 13758 15359 1 1
QUERY_FILE_INFORMATION 13758
ReadX 13755 14624 2048 2048
ReadX 13755 16672 2048 2048
ReadX 13755 18720 2048 2048
ReadX 13755 1728 2048 2048
WriteX 13758 0 15360 15360
Close 13758
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x40 0x1 13759
QUERY_FILE_INFORMATION 13759
ReadX 13759 0 512 512
ReadX 13759 2048 512 512
ReadX 13759 2560 512 512
QUERY_FILE_INFORMATION 13759
QUERY_FILE_INFORMATION 13759
QUERY_FILE_INFORMATION 13759
QUERY_FILE_INFORMATION 13759
QUERY_FILE_INFORMATION 13759
WriteX 13759 2152 384 384
QUERY_FILE_INFORMATION 13759
WriteX 13759 2150 22 22
WriteX 13759 2144 106 106
QUERY_FILE_INFORMATION 13759
WriteX 13759 2176 496 496
ReadX 13759 2176 496 496
QUERY_FILE_INFORMATION 13759
WriteX 13759 2440 384 384
QUERY_FILE_INFORMATION 13759
WriteX 13759 2152 384 384
WriteX 13759 2432 112 112
QUERY_FILE_INFORMATION 13759
WriteX 13759 2439 16 16
QUERY_FILE_INFORMATION 13759
WriteX 13759 2208 220 220
ReadX 13759 2208 220 220
QUERY_FILE_INFORMATION 13759
QUERY_FILE_INFORMATION 13759
WriteX 13759 2440 220 220
QUERY_FILE_INFORMATION 13759
WriteX 13759 2453 36 36
WriteX 13759 2080 512 512
WriteX 13759 2176 512 512
WriteX 13759 2112 512 512
WriteX 13759 2048 512 512
WriteX 13759 0 512 512
QUERY_FILE_INFORMATION 13755
QUERY_FILE_INFORMATION 13755
WriteX 13759 2080 512 512
Close 13759
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0000.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0000.TMP 0x200000 0x1 13760
Close 13760
Rename \clients\client1\~dmtmp\WORD\~WRD0000.TMP \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x1 13761
QUERY_FILE_INFORMATION 13761
ReadX 13761 0 512 512
ReadX 13761 2048 512 512
ReadX 13761 2560 512 512
QUERY_FILE_INFORMATION 13761
QUERY_FILE_INFORMATION 13761
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
NTCreateX \clients\client1\~dmtmp\WORD\~$CHAP10.DOC 0x40 0x1 13762
Close 13762
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
Unlink \clients\client1\~dmtmp\WORD\~$CHAP10.DOC
Close 13755
ReadX 13761 1408 512 512
ReadX 13761 2048 512 512
ReadX 13761 1536 512 512
ReadX 13761 2560 512 512
ReadX 13761 3072 512 512
ReadX 13761 3584 512 512
ReadX 13761 4096 512 512
ReadX 13761 4608 512 512
ReadX 13761 5120 512 512
ReadX 13761 5632 512 512
ReadX 13761 6144 512 512
ReadX 13761 6656 512 512
ReadX 13761 7168 512 512
ReadX 13761 7680 512 512
ReadX 13761 8192 512 512
ReadX 13761 8704 512 512
ReadX 13761 9216 512 512
ReadX 13761 9728 512 512
ReadX 13761 10240 512 512
ReadX 13761 10752 512 512
ReadX 13761 11264 512 512
ReadX 13761 11776 512 512
ReadX 13761 12288 512 512
ReadX 13761 12800 512 512
ReadX 13761 13312 512 512
ReadX 13761 13824 512 512
ReadX 13761 14336 512 512
ReadX 13761 14848 512 512
ReadX 13761 15360 512 0
ReadX 13761 15360 512 0
ReadX 13761 15360 512 0
ReadX 13761 15360 512 0
ReadX 13761 15360 512 0
ReadX 13761 15360 512 0
ReadX 13761 15360 512 0
ReadX 13761 15360 512 0
ReadX 13761 15360 512 0
ReadX 13761 15360 512 0
ReadX 13761 2560 2048 2048
ReadX 13761 4608 2048 2048
ReadX 13761 6656 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\BASEMACH.DOC
NTCreateX \clients\client1\~dmtmp\WORD\BASEMACH.DOC 0x40 0x1 13763
QUERY_FILE_INFORMATION 13763
ReadX 13763 0 512 512
ReadX 13763 512 512 512
ReadX 13763 1024 512 512
QUERY_FILE_INFORMATION 13763
QUERY_FILE_INFORMATION 13763
ReadX 13763 352 2048 2048
ReadX 13763 608 1097 1097
ReadX 13763 576 1609 1609
ReadX 13763 4096 512 512
ReadX 13763 1536 512 512
ReadX 13763 3840 256 256
ReadX 13763 288 576 576
ReadX 13763 512 512 512
ReadX 13763 480 512 512
ReadX 13763 544 512 512
QUERY_FS_INFORMATION 259
NTCreateX \clients\client1\~dmtmp\WORD\BASEMACH.DOC 0x40 0x1 13764
ReadX 13764 0 4096 4096
ReadX 13764 4096 4096 4096
ReadX 13764 8192 4096 4096
Close 13763
Close 13764
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\RESULTS.XLS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x40 0x2 13765
WriteX 13765 15359 1 1
QUERY_FILE_INFORMATION 13765
WriteX 13765 0 15360 15360
Close 13765
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x40 0x1 13766
QUERY_FILE_INFORMATION 13766
ReadX 13766 0 512 512
ReadX 13766 2048 512 512
ReadX 13766 2560 512 512
QUERY_FILE_INFORMATION 13766
QUERY_FILE_INFORMATION 13766
QUERY_FILE_INFORMATION 13766
QUERY_FILE_INFORMATION 13766
QUERY_FILE_INFORMATION 13766
WriteX 13766 2152 384 384
QUERY_FILE_INFORMATION 13766
WriteX 13766 2150 22 22
WriteX 13766 2144 106 106
QUERY_FILE_INFORMATION 13766
WriteX 13766 2176 476 476
ReadX 13766 2176 476 476
QUERY_FILE_INFORMATION 13766
WriteX 13766 2440 384 384
QUERY_FILE_INFORMATION 13766
WriteX 13766 2152 384 384
WriteX 13766 2432 92 92
QUERY_FILE_INFORMATION 13766
WriteX 13766 2437 36 36
QUERY_FILE_INFORMATION 13766
WriteX 13766 2208 220 220
ReadX 13766 2208 220 220
QUERY_FILE_INFORMATION 13766
QUERY_FILE_INFORMATION 13766
WriteX 13766 2440 220 220
QUERY_FILE_INFORMATION 13766
WriteX 13766 2453 36 36
WriteX 13766 2080 512 512
WriteX 13766 2176 512 512
WriteX 13766 2112 512 512
WriteX 13766 2048 512 512
WriteX 13766 0 512 512
QUERY_FILE_INFORMATION 13761
QUERY_FILE_INFORMATION 13761
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL0004.TMP 1
Close 13761
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x200000 0x1 13767
Close 13767
Rename \clients\client1\~dmtmp\WORD\HANDOUT.DOC \clients\client1\~dmtmp\WORD\~WRL0004.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL0004.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x40 0x1 13768
QUERY_FILE_INFORMATION 13768
ReadX 13768 0 512 512
ReadX 13768 2048 512 512
ReadX 13768 2560 512 512
QUERY_FILE_INFORMATION 13768
QUERY_FILE_INFORMATION 13768
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x200000 0x1 13769
Close 13769
WriteX 13766 2080 512 512
Close 13766
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD0003.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD0003.TMP 0x200000 0x1 13770
Close 13770
Rename \clients\client1\~dmtmp\WORD\~WRD0003.TMP \clients\client1\~dmtmp\WORD\HANDOUT.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\HANDOUT.DOC
NTCreateX \clients\client1\~dmtmp\WORD\HANDOUT.DOC 0x40 0x1 13771
QUERY_FILE_INFORMATION 13771
ReadX 13771 0 512 512
ReadX 13771 2048 512 512
ReadX 13771 2560 512 512
QUERY_FILE_INFORMATION 13771
QUERY_FILE_INFORMATION 13771
ReadX 13771 1312 512 512
ReadX 13771 1536 512 512
ReadX 13771 2048 512 512
ReadX 13771 576 512 512
ReadX 13771 1088 512 512
ReadX 13771 1056 512 512
ReadX 13771 1120 512 512
ReadX 13771 1184 512 512
ReadX 13771 2560 2048 2048
ReadX 13771 4608 2048 2048
ReadX 13771 6656 2048 2048
ReadX 13771 8704 2048 2048
ReadX 13771 10752 2048 2048
ReadX 13771 12800 2048 2048
ReadX 13771 14848 2048 512
ReadX 13771 15360 1536 0
ReadX 13771 1088 2048 2048
ReadX 13771 3136 2048 2048
ReadX 13771 1665 5835 5835
ReadX 13771 1856 2048 2048
ReadX 13771 2112 512 512
ReadX 13771 2152 384 384
ReadX 13771 2432 92 92
ReadX 13771 2176 512 512
ReadX 13771 2440 220 220
QUERY_FILE_INFORMATION 13771
QUERY_FILE_INFORMATION 13771
ReadX 13771 2432 512 512
WriteX 13771 2272 512 512
ReadX 13771 2144 512 512
WriteX 13771 2304 512 512
WriteX 13771 2272 92 92
WriteX 13771 2208 512 512
WriteX 13771 2720 512 512
WriteX 13771 0 512 512
QUERY_FILE_INFORMATION 13771
QUERY_FILE_INFORMATION 13771
ReadX 13771 1312 4096 4096
ReadX 13771 5408 4096 4096
ReadX 13771 9504 3305 3305
ReadX 13771 512 4096 4096
QUERY_FILE_INFORMATION 13771
QUERY_FILE_INFORMATION 13771
QUERY_FILE_INFORMATION 13771
WriteX 13771 3132 50 50
WriteX 13771 3182 4096 4096
WriteX 13771 7278 4096 4096
WriteX 13771 15469 1 1
QUERY_FILE_INFORMATION 13771
WriteX 13771 11374 4096 4096
WriteX 13771 15470 3584 3584
WriteX 13771 2144 512 512
WriteX 13771 2336 4096 4096
WriteX 13771 6432 4096 4096
WriteX 13771 10528 4096 4096
WriteX 13771 14624 462 462
WriteX 13771 2048 512 512
WriteX 13771 2560 512 512
WriteX 13771 0 512 512
QUERY_FILE_INFORMATION 13771
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FOO 1
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FACTS 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\FACTS.DOC  
NTCreateX \clients\client1\~dmtmp\WORD\FACTS.DOC 0x40 0x1 13772
QUERY_FILE_INFORMATION 13772
ReadX 13772 0 512 512
ReadX 13772 1152 512 512
ReadX 13772 1664 512 512
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
ReadX 13772 512 2048 2048
ReadX 13772 928 2048 2048
NTCreateX \clients\client1\~dmtmp\WORD\~$FACTS.DOC 0x40 0x2 13773
WriteX 13773 52 1 1
QUERY_FILE_INFORMATION 13773
WriteX 13773 0 53 53
Close 13773
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
ReadX 13772 1120 504 504
ReadX 13772 896 2048 2048
ReadX 13772 1056 1528 1528
ReadX 13772 864 2048 2048
ReadX 13772 832 2048 2048
ReadX 13772 736 2048 2048
ReadX 13772 1216 512 512
ReadX 13772 1256 384 384
ReadX 13772 1536 140 140
ReadX 13772 1280 512 512
ReadX 13772 1548 252 252
ReadX 13771 1184 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS 1
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x2 13774
Close 13774
Unlink \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC    1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC    1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP 11
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x40 0x2 13775
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC    1
ReadX 13772 2560 2048 2048
ReadX 13772 4608 2048 2048
ReadX 13772 6656 2048 2048
ReadX 13772 8704 2048 2048
ReadX 13772 10752 2048 2048
WriteX 13775 12005 1 1
QUERY_FILE_INFORMATION 13775
WriteX 13775 0 12006 12006
Close 13775
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x40 0x1 13776
QUERY_FILE_INFORMATION 13776
ReadX 13776 0 512 512
ReadX 13776 1152 512 512
ReadX 13776 1664 512 512
QUERY_FILE_INFORMATION 13776
QUERY_FILE_INFORMATION 13776
QUERY_FILE_INFORMATION 13776
QUERY_FILE_INFORMATION 13776
QUERY_FILE_INFORMATION 13776
QUERY_FILE_INFORMATION 13776
QUERY_FILE_INFORMATION 13776
WriteX 13776 1256 384 384
QUERY_FILE_INFORMATION 13776
WriteX 13776 1254 22 22
WriteX 13776 1248 106 106
QUERY_FILE_INFORMATION 13776
WriteX 13776 1280 508 508
ReadX 13776 1280 508 508
QUERY_FILE_INFORMATION 13776
WriteX 13776 1544 384 384
QUERY_FILE_INFORMATION 13776
WriteX 13776 1256 384 384
WriteX 13776 1536 124 124
QUERY_FILE_INFORMATION 13776
WriteX 13776 1543 4 4
QUERY_FILE_INFORMATION 13776
WriteX 13776 1312 252 252
ReadX 13776 1312 252 252
QUERY_FILE_INFORMATION 13776
QUERY_FILE_INFORMATION 13776
WriteX 13776 1544 252 252
QUERY_FILE_INFORMATION 13776
WriteX 13776 1559 4 4
WriteX 13776 1184 512 512
WriteX 13776 1280 512 512
WriteX 13776 1216 512 512
WriteX 13776 1152 512 512
WriteX 13776 0 512 512
QUERY_FILE_INFORMATION 13772
QUERY_FILE_INFORMATION 13772
WriteX 13776 1184 512 512
Close 13776
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD3497.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD3497.TMP 0x200000 0x1 13777
Close 13777
Rename \clients\client1\~dmtmp\WORD\~WRD3497.TMP \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x1 13778
QUERY_FILE_INFORMATION 13778
ReadX 13778 0 512 512
ReadX 13778 1152 512 512
ReadX 13778 1664 512 512
QUERY_FILE_INFORMATION 13778
QUERY_FILE_INFORMATION 13778
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\~$FACTS.DOC 0x40 0x1 13779
Close 13779
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~$FACTS.DOC
Unlink \clients\client1\~dmtmp\WORD\~$FACTS.DOC
Close 13772
ReadX 13778 736 512 512
ReadX 13778 1536 2048 2048
ReadX 13778 3584 2048 2048
ReadX 13778 5632 2048 2048
ReadX 13778 7680 2048 2048
ReadX 13778 9728 2048 2048
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP 1
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x40 0x2 13780
WriteX 13780 11990 1 1
QUERY_FILE_INFORMATION 13780
WriteX 13780 0 11991 11991
Close 13780
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x40 0x1 13781
QUERY_FILE_INFORMATION 13781
ReadX 13781 0 512 512
ReadX 13781 1184 512 512
ReadX 13781 1696 512 512
QUERY_FILE_INFORMATION 13781
QUERY_FILE_INFORMATION 13781
QUERY_FILE_INFORMATION 13781
QUERY_FILE_INFORMATION 13781
QUERY_FILE_INFORMATION 13781
QUERY_FILE_INFORMATION 13781
QUERY_FILE_INFORMATION 13781
WriteX 13781 1288 384 384
QUERY_FILE_INFORMATION 13781
WriteX 13781 1286 22 22
WriteX 13781 1280 106 106
QUERY_FILE_INFORMATION 13781
WriteX 13781 1312 508 508
ReadX 13781 1312 508 508
QUERY_FILE_INFORMATION 13781
WriteX 13781 1576 384 384
QUERY_FILE_INFORMATION 13781
WriteX 13781 1288 384 384
WriteX 13781 1568 124 124
QUERY_FILE_INFORMATION 13781
WriteX 13781 1575 4 4
QUERY_FILE_INFORMATION 13781
WriteX 13781 1344 252 252
ReadX 13781 1344 252 252
QUERY_FILE_INFORMATION 13781
QUERY_FILE_INFORMATION 13781
WriteX 13781 1576 252 252
QUERY_FILE_INFORMATION 13781
WriteX 13781 1591 4 4
WriteX 13781 1216 512 512
WriteX 13781 1312 512 512
WriteX 13781 1248 512 512
WriteX 13781 1184 512 512
WriteX 13781 0 512 512
QUERY_FILE_INFORMATION 13778
QUERY_FILE_INFORMATION 13778
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL1146.TMP 1
Close 13778
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x200000 0x1 13782
Close 13782
Rename \clients\client1\~dmtmp\WORD\TIPS.DOC \clients\client1\~dmtmp\WORD\~WRL1146.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRL1146.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x40 0x1 13783
QUERY_FILE_INFORMATION 13783
ReadX 13783 0 512 512
ReadX 13783 1152 512 512
ReadX 13783 1664 512 512
QUERY_FILE_INFORMATION 13783
QUERY_FILE_INFORMATION 13783
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x200000 0x1 13784
Close 13784
WriteX 13781 1216 512 512
Close 13781
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\~WRD1119.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRD1119.TMP 0x200000 0x1 13785
Close 13785
Rename \clients\client1\~dmtmp\WORD\~WRD1119.TMP \clients\client1\~dmtmp\WORD\TIPS.DOC
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
NTCreateX \clients\client1\~dmtmp\WORD\TIPS.DOC 0x40 0x1 13786
QUERY_FILE_INFORMATION 13786
ReadX 13786 0 512 512
ReadX 13786 1184 512 512
ReadX 13786 1696 512 512
QUERY_FILE_INFORMATION 13786
QUERY_FILE_INFORMATION 13786
ReadX 13786 1536 512 512
ReadX 13786 736 512 512
ReadX 13786 2048 512 512
ReadX 13786 2560 512 512
ReadX 13786 3072 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS 1
NTCreateX \clients\client1\~dmtmp\WORD\FSA4230.TMP 0x40 0x2 13787
Close 13787
Unlink \clients\client1\~dmtmp\WORD\FSA4230.TMP
ReadX 13786 914 3899 3899
ReadX 13786 1248 512 512
ReadX 13786 1288 384 384
ReadX 13786 1568 124 124
ReadX 13786 1312 512 512
ReadX 13786 1576 252 252
QUERY_FILE_INFORMATION 13786
QUERY_FILE_INFORMATION 13786
ReadX 13786 1568 512 512
WriteX 13786 1408 512 512
ReadX 13786 1280 512 512
WriteX 13786 1440 512 512
WriteX 13786 1408 124 124
WriteX 13786 1344 512 512
WriteX 13786 1856 512 512
WriteX 13786 0 512 512
QUERY_FILE_INFORMATION 13786
QUERY_FILE_INFORMATION 13786
ReadX 13786 544 4096 4096
ReadX 13786 4640 4096 4096
ReadX 13786 8736 1637 1637
ReadX 13786 512 4096 4096
QUERY_FILE_INFORMATION 13786
QUERY_FILE_INFORMATION 13786
WriteX 13786 1280 512 512
WriteX 13786 1472 3584 3584
WriteX 13786 5056 4096 4096
WriteX 13786 13247 1 1
QUERY_FILE_INFORMATION 13786
WriteX 13786 9152 4096 4096
WriteX 13786 13248 1736 1736
WriteX 13786 1184 512 512
WriteX 13786 1696 512 512
WriteX 13786 0 512 512
QUERY_FILE_INFORMATION 13786
ReadX 13786 1632 1024 1024
ReadX 13786 288 1024 1024
ReadX 13786 1312 2048 2048
ReadX 13786 3360 1024 1024
ReadX 13786 1696 1024 1024
ReadX 13786 2720 512 512
ReadX 13786 3232 512 512
ReadX 13786 3744 512 512
ReadX 13786 4256 512 512
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\WORD\TIPS.DOC
ReadX 13786 2066 3998 3998
ReadX 13786 1448 384 384
ReadX 13786 1408 124 124
ReadX 13786 1416 252 252
QUERY_FILE_INFORMATION 13786
QUERY_FILE_INFORMATION 13786
ReadX 13786 1408 512 512
WriteX 13786 1536 512 512
ReadX 13786 1440 512 512
WriteX 13786 2048 512 512
WriteX 13786 1536 124 124
WriteX 13786 512 512 512
WriteX 13786 1024 512 512
WriteX 13786 0 512 512
QUERY_FILE_INFORMATION 13786
ReadX 13786 1696 4096 4096
ReadX 13786 5792 4096 4096
ReadX 13786 9888 1736 1736
ReadX 13786 1280 512 512
ReadX 13786 1472 3584 3584
QUERY_FILE_INFORMATION 13786
QUERY_FILE_INFORMATION 13786
WriteX 13786 3940 156 156
WriteX 13786 4096 512 512
WriteX 13786 544 3584 3584
WriteX 13786 4128 4096 4096
WriteX 13786 8224 3584 3584
WriteX 13786 1344 512 512
WriteX 13786 1856 1536 1536
WriteX 13786 2336 512 512
WriteX 13786 3584 356 356
WriteX 13786 2560 512 512
WriteX 13786 3072 512 512
WriteX 13786 0 512 512
QUERY_FILE_INFORMATION 13786
Close 13768
Close 13771
Close 13786
Close 13783
NTCreateX \clients\client1\~dmtmp\WORD\~WRL0004.TMP 0x40 0x1 13788
Close 13788
Unlink \clients\client1\~dmtmp\WORD\~WRL0004.TMP
NTCreateX \clients\client1\~dmtmp\WORD\~WRL1146.TMP 0x40 0x1 13789
Close 13789
Unlink \clients\client1\~dmtmp\WORD\~WRL1146.TMP
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13790
WriteX 13790 0 65471 65471
WriteX 13790 65471 63 63
WriteX 13790 65534 65471 65471
WriteX 13790 131005 63 63
Close 13790
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13791
WriteX 13791 0 65471 65471
WriteX 13791 65471 63 63
WriteX 13791 65534 65471 65471
WriteX 13791 131005 63 63
WriteX 13791 131068 65471 65471
WriteX 13791 196539 63 63
WriteX 13791 196602 65471 65471
WriteX 13791 262073 63 63
Close 13791
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13792
WriteX 13792 0 65471 65471
WriteX 13792 65471 63 63
WriteX 13792 65534 65471 65471
WriteX 13792 131005 63 63
WriteX 13792 131068 65471 65471
WriteX 13792 196539 63 63
WriteX 13792 196602 65471 65471
WriteX 13792 262073 63 63
WriteX 13792 262136 65471 65471
WriteX 13792 327607 63 63
WriteX 13792 327670 65471 65471
WriteX 13792 393141 63 63
WriteX 13792 393204 65471 65471
WriteX 13792 458675 63 63
WriteX 13792 458738 65471 65471
WriteX 13792 524209 63 63
Close 13792
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER.MDB
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.MDB 0x40 0x1 13793
QUERY_FILE_INFORMATION 13793
QUERY_FILE_INFORMATION 13793
ReadX 13793 0 16384 16384
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.LDB 0x40 0x2 13794
Close 13794
NTCreateX \clients\client1\~dmtmp\ACCESS\FASTENER.LDB 0x40 0x1 13795
WriteX 13795 63 1 1
QUERY_FILE_INFORMATION 13795
WriteX 13795 0 64 64
ReadX 13793 992 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 344 2048 2048
ReadX 13793 1344 2048 2048
ReadX 13793 1352 2048 2048
ReadX 13793 1320 2048 2048
ReadX 13793 1360 2048 2048
ReadX 13793 1344 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1376 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2304 2048 2048
ReadX 13793 1472 2048 2048
ReadX 13793 0 2048 2048
ReadX 13793 1480 2048 2048
ReadX 13793 1488 2048 2048
ReadX 13793 1496 2048 2048
ReadX 13793 0 2048 2048
ReadX 13793 1504 2048 2048
ReadX 13793 1464 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 1000 2048 2048
ReadX 13793 1416 2048 2048
ReadX 13793 1000 2048 2048
QUERY_FS_INFORMATION 259
ReadX 13793 360 2048 2048
ReadX 13793 368 2048 2048
ReadX 13793 360 2048 2048
ReadX 13793 376 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 1232 2048 2048
ReadX 13793 2432 6144 6144
ReadX 13793 2376 2048 2048
ReadX 13793 2360 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 2376 2048 2048
ReadX 13793 2384 2048 2048
ReadX 13793 2368 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 1296 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 2392 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
ReadX 13793 0 2048 2048
ReadX 13793 2688 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 2688 2048 2048
WriteX 13793 2688 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 0 2048 2048
ReadX 13793 2688 2048 2048
ReadX 13793 2688 2048 2048
ReadX 13793 2688 2048 2048
WriteX 13793 2688 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 0 2048 2048
ReadX 13793 2688 2048 2048
QUERY_FS_INFORMATION 259
ReadX 13793 2688 2048 2048
ReadX 13793 2688 2048 2048
WriteX 13793 2688 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 320 4096 4096
ReadX 13793 0 2048 2048
ReadX 13793 3584 2048 2048
ReadX 13793 3584 2048 2048
ReadX 13793 3584 2048 2048
ReadX 13793 0 2048 2048
WriteX 13793 3584 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2688 2048 2048
ReadX 13793 0 2048 2048
ReadX 13793 2688 2048 2048
ReadX 13793 2688 2048 2048
WriteX 13793 2688 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 0 2048 2048
ReadX 13793 3200 2048 2048
ReadX 13793 3200 2048 2048
ReadX 13793 3200 2048 2048
WriteX 13793 3200 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 0 2048 2048
ReadX 13793 3456 2048 2048
ReadX 13793 3456 2048 2048
ReadX 13793 3456 2048 2048
WriteX 13793 3456 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2496 2048 2048
ReadX 13793 2472 2048 2048
ReadX 13793 2456 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 2472 2048 2048
ReadX 13793 2480 2048 2048
ReadX 13793 2464 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 2488 2048 2048
ReadX 13793 2568 8192 8192
ReadX 13793 1000 2048 2048
ReadX 13793 328 2048 2048
ReadX 13793 3840 2048 2048
ReadX 13793 2048 2048 2048
ReadX 13793 2560 2048 2048
ReadX 13793 920 2048 2048
WriteX 13793 2048 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 312 2048 2048
WriteX 13793 336 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 328 2048 2048
WriteX 13793 2560 2048 2048
WriteX 13793 3840 2048 2048
WriteX 13793 920 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2432 2048 2048
WriteX 13793 2432 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2456 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 0 2048 2048
ReadX 13793 328 2048 2048
ReadX 13793 2560 2048 2048
ReadX 13793 2048 2048 2048
ReadX 13793 3840 2048 2048
ReadX 13793 336 2048 2048
ReadX 13793 920 2048 2048
WriteX 13793 1536 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 2048 2048 2048
WriteX 13793 2560 2048 2048
WriteX 13793 336 2048 2048
WriteX 13793 920 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2048 2048 2048
ReadX 13793 2432 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 2048 2048 2048
WriteX 13793 2432 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2456 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1536 2048 2048
ReadX 13793 3840 2048 2048
ReadX 13793 336 2048 2048
ReadX 13793 920 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 1536 2048 2048
WriteX 13793 336 2048 2048
WriteX 13793 920 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2432 2048 2048
WriteX 13793 2432 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2456 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1536 2048 2048
ReadX 13793 3840 2048 2048
ReadX 13793 336 2048 2048
ReadX 13793 920 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 1536 2048 2048
WriteX 13793 336 2048 2048
WriteX 13793 920 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2432 2048 2048
WriteX 13793 2432 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2456 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1536 2048 2048
ReadX 13793 3840 2048 2048
ReadX 13793 336 2048 2048
ReadX 13793 920 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 1536 2048 2048
WriteX 13793 336 2048 2048
WriteX 13793 920 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2432 2048 2048
WriteX 13793 2432 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2456 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1536 2048 2048
ReadX 13793 3840 2048 2048
ReadX 13793 336 2048 2048
ReadX 13793 920 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 1536 2048 2048
WriteX 13793 336 2048 2048
WriteX 13793 920 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2432 2048 2048
WriteX 13793 2432 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 0 2048 2048
Flush 13793
ReadX 13793 2456 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1536 2048 2048
ReadX 13793 3840 2048 2048
ReadX 13793 336 2048 2048
ReadX 13793 920 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 1536 2048 2048
WriteX 13793 336 2048 2048
WriteX 13793 920 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2432 2048 2048
WriteX 13793 2432 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2624 6144 6144
ReadX 13793 2616 2048 2048
ReadX 13793 2688 2048 2048
ReadX 13793 2600 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 2616 2048 2048
ReadX 13793 2608 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 344 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 520 2048 2048
ReadX 13793 1392 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 400 2048 2048
ReadX 13793 528 2048 2048
ReadX 13793 536 2048 2048
ReadX 13793 824 2048 2048
ReadX 13793 832 2048 2048
ReadX 13793 384 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 408 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 528 2048 2048
ReadX 13793 552 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 824 2048 2048
ReadX 13793 840 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 768 2048 2048
ReadX 13793 2048 2048 2048
WriteX 13793 1415 1 1
WriteX 13793 352 2048 2048
WriteX 13793 1112 2048 2048
WriteX 13793 1400 2048 2048
WriteX 13793 1408 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 2048 2048 2048
WriteX 13793 768 2048 2048
WriteX 13793 344 2048 2048
WriteX 13793 1000 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 416 2048 2048
ReadX 13793 424 2048 2048
ReadX 13793 432 2048 2048
ReadX 13793 440 2048 2048
ReadX 13793 576 16384 16384
ReadX 13793 448 2048 2048
ReadX 13793 456 2048 2048
ReadX 13793 464 2048 2048
ReadX 13793 640 16384 16384
ReadX 13793 704 16384 16384
ReadX 13793 768 10240 10240
QUERY_FS_INFORMATION 259
ReadX 13793 848 2048 2048
ReadX 13793 560 2048 2048
ReadX 13793 808 2048 2048
QUERY_FS_INFORMATION 259
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 2600 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 352 2048 2048
ReadX 13793 1928 8192 8192
ReadX 13793 528 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 824 2048 2048
ReadX 13793 0 2048 2048
Flush 13793
ReadX 13793 2600 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 352 2048 2048
ReadX 13793 528 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 824 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 856 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 0 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 392 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 392 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 472 2048 2048
ReadX 13793 480 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 488 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 928 2048 2048
ReadX 13793 936 2048 2048
ReadX 13793 976 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 392 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 392 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 952 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 0 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 528 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 528 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 816 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 1384 2048 2048
QUERY_FS_INFORMATION 259
ReadX 13793 1336 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 528 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 528 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 0 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1240 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2200 4096 4096
ReadX 13793 2152 2048 2048
ReadX 13793 2160 2048 2048
ReadX 13793 528 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 1312 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 1928 2048 2048
ReadX 13793 528 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 824 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1416 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 352 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 528 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 824 2048 2048
ReadX 13793 384 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 528 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 824 2048 2048
QUERY_FS_INFORMATION 259
ReadX 13793 352 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 768 2048 2048
ReadX 13793 2048 2048 2048
ReadX 13793 352 2048 2048
WriteX 13793 1551 1 1
WriteX 13793 1512 2048 2048
WriteX 13793 1520 2048 2048
WriteX 13793 1528 2048 2048
WriteX 13793 1544 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 2048 2048 2048
WriteX 13793 768 2048 2048
WriteX 13793 344 2048 2048
WriteX 13793 1000 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2048 2048 2048
WriteX 13793 2048 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 1000 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 1240 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 344 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 384 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 768 2048 2048
WriteX 13793 1567 1 1
WriteX 13793 1552 2048 2048
WriteX 13793 1560 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 768 2048 2048
WriteX 13793 344 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 1328 2048 2048
ReadX 13793 0 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 1240 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2200 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 1240 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 344 2048 2048
ReadX 13793 384 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 2048 2048 2048
ReadX 13793 768 2048 2048
WriteX 13793 1583 1 1
WriteX 13793 1568 2048 2048
WriteX 13793 1576 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 2048 2048 2048
WriteX 13793 768 2048 2048
WriteX 13793 344 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 864 2048 2048
ReadX 13793 872 2048 2048
ReadX 13793 912 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 2688 2048 2048
ReadX 13793 1000 2048 2048
WriteX 13793 2688 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 0 2048 2048
ReadX 13793 2944 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 0 2048 2048
Flush 13793
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 2688 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 2688 2048 2048
WriteX 13793 2688 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 392 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 392 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 416 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 416 2048 2048
ReadX 13793 864 2048 2048
ReadX 13793 872 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 3840 2048 2048
ReadX 13793 312 2048 2048
ReadX 13793 888 2048 2048
ReadX 13793 400 2048 2048
ReadX 13793 896 2048 2048
WriteX 13793 1584 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 400 2048 2048
WriteX 13793 416 2048 2048
WriteX 13793 864 2048 2048
WriteX 13793 872 2048 2048
WriteX 13793 888 2048 2048
WriteX 13793 896 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 0 2048 2048
ReadX 13793 584 2048 2048
ReadX 13793 392 2048 2048
WriteX 13793 392 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 1328 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 392 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 0 2048 2048
ReadX 13793 408 2048 2048
ReadX 13793 1328 2048 2048
ReadX 13793 864 2048 2048
ReadX 13793 912 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 3840 2048 2048
ReadX 13793 312 2048 2048
ReadX 13793 1584 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 408 2048 2048
WriteX 13793 912 2048 2048
WriteX 13793 1584 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 0 2048 2048
ReadX 13793 408 2048 2048
ReadX 13793 392 2048 2048
WriteX 13793 392 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 528 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 528 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 552 2048 2048
ReadX 13793 1336 2048 2048
WriteX 13793 552 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 0 2048 2048
ReadX 13793 552 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 2664 2048 2048
ReadX 13793 2648 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 2672 2048 2048
ReadX 13793 2656 2048 2048
ReadX 13793 528 2048 2048
ReadX 13793 1000 2048 2048
FIND_FIRST \clients\client1\~dmtmp\<.JNK
ReadX 13793 528 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 1336 2048 2048
ReadX 13793 2680 2048 2048
ReadX 13793 2760 8192 8192
ReadX 13793 544 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 568 2048 2048
ReadX 13793 544 2048 2048
ReadX 13793 0 2048 2048
Flush 13793
ReadX 13793 2816 6144 6144
ReadX 13793 2760 2048 2048
ReadX 13793 2744 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 2752 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 528 2048 2048
ReadX 13793 528 2048 2048
ReadX 13793 1384 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\INV.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x2 13797
Close 13797
Unlink \clients\client1\~dmtmp\ACCESS\INV.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\INV.PRN 0x40 0x2 13799
WriteX 13799 4065 1 1
QUERY_FILE_INFORMATION 13799
WriteX 13799 0 62591 62591
Close 13799
ReadX 13793 0 2048 2048
ReadX 13793 2808 2048 2048
ReadX 13793 2792 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 2800 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 384 2048 2048
ReadX 13793 392 2048 2048
ReadX 13793 1384 2048 2048
ReadX 13793 2432 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\SALES.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x2 13801
Close 13801
Unlink \clients\client1\~dmtmp\ACCESS\SALES.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\SALES.PRN 0x40 0x2 13803
WriteX 13803 4094 1 1
QUERY_FILE_INFORMATION 13803
WriteX 13803 0 10845 10845
Close 13803
ReadX 13793 1432 2048 2048
ReadX 13793 1304 2048 2048
ReadX 13793 1368 2048 2048
ReadX 13793 2304 2048 2048
ReadX 13793 1440 2048 2048
ReadX 13793 1424 2048 2048
ReadX 13793 1448 2048 2048
ReadX 13793 1456 2048 2048
ReadX 13793 2432 2048 2048
ReadX 13793 1384 2048 2048
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\LABELS.PRN 1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x2 13805
Close 13805
Unlink \clients\client1\~dmtmp\ACCESS\LABELS.PRN
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\ACCESS\LABELS.PRN 0x40 0x2 13807
ReadX 13793 0 2048 2048
WriteX 13807 4081 1 1
QUERY_FILE_INFORMATION 13807
WriteX 13807 0 30118 30118
Close 13807
ReadX 13793 1344 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 1152 2048 2048
ReadX 13793 1152 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 1000 2048 2048
ReadX 13793 768 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 344 2048 2048
WriteX 13793 1000 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 1416 2048 2048
ReadX 13793 1416 2048 2048
ReadX 13793 344 2048 2048
ReadX 13793 896 2048 2048
WriteX 13793 1538 2 2
WriteX 13793 344 2048 2048
WriteX 13793 1416 2048 2048
WriteX 13793 1538 2 2
ReadX 13793 2048 2048 2048
WriteX 13793 2048 2048 2048
WriteX 13793 1538 2 2
Close 13793
Close 13795
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\ACCESS\FASTENER.LDB
Unlink \clients\client1\~dmtmp\ACCESS\FASTENER.LDB
QUERY_PATH_INFORMATION \clients\client1\~dmtmp
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\SEED
FIND_FIRST \clients\client1\~dmtmp\*
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\*
NTCreateX \clients\client1\~dmtmp\SEED\SMALL.FIL 0x40 0x1 13808
ReadX 13808 0 65471 65471
ReadX 13808 65471 63 63
ReadX 13808 65534 65471 65471
ReadX 13808 131005 63 63
ReadX 13808 131068 65471 65471
ReadX 13808 196539 63 63
ReadX 13808 196602 65471 65471
ReadX 13808 262073 63 63
ReadX 13808 262136 65471 65471
ReadX 13808 327607 63 63
ReadX 13808 327670 10 10
Close 13808
NTCreateX \clients\client1\~dmtmp\SEED\MEDIUM.FIL 0x40 0x1 13809
ReadX 13809 0 65471 65471
ReadX 13809 65471 63 63
ReadX 13809 65534 65471 65471
ReadX 13809 131005 63 63
ReadX 13809 131068 65471 65471
ReadX 13809 196539 63 63
ReadX 13809 196602 65471 65471
ReadX 13809 262073 63 63
ReadX 13809 262136 65471 65471
ReadX 13809 327607 63 63
ReadX 13809 327670 65471 65471
ReadX 13809 393141 63 63
ReadX 13809 393204 65471 65471
ReadX 13809 458675 63 63
ReadX 13809 458738 65471 65471
ReadX 13809 524209 63 63
ReadX 13809 524272 65471 65471
ReadX 13809 589743 63 63
ReadX 13809 589806 65471 65471
ReadX 13809 655277 63 63
ReadX 13809 655340 32 32
Close 13809
NTCreateX \clients\client1\~dmtmp\SEED\LARGE.FIL 0x40 0x1 13810
ReadX 13810 0 65471 65471
ReadX 13810 65471 63 63
ReadX 13810 65534 65471 65471
ReadX 13810 131005 63 63
ReadX 13810 131068 65471 65471
ReadX 13810 196539 63 63
ReadX 13810 196602 65471 65471
ReadX 13810 262073 63 63
ReadX 13810 262136 65471 65471
ReadX 13810 327607 63 63
ReadX 13810 327670 65471 65471
ReadX 13810 393141 63 63
ReadX 13810 393204 65471 65471
ReadX 13810 458675 63 63
ReadX 13810 458738 65471 65471
ReadX 13810 524209 63 63
ReadX 13810 524272 65471 65471
ReadX 13810 589743 63 63
ReadX 13810 589806 65471 65471
ReadX 13810 655277 63 63
ReadX 13810 655340 65471 65471
ReadX 13810 720811 63 63
ReadX 13810 720874 65471 65471
ReadX 13810 786345 63 63
ReadX 13810 786408 65471 65471
ReadX 13810 851879 63 63
ReadX 13810 851942 65471 65471
ReadX 13810 917413 63 63
ReadX 13810 917476 65471 65471
ReadX 13810 982947 63 63
ReadX 13810 983010 65471 65471
ReadX 13810 1048481 63 63
ReadX 13810 1048544 65471 65471
ReadX 13810 1114015 63 63
ReadX 13810 1114078 65471 65471
ReadX 13810 1179549 63 63
ReadX 13810 1179612 65471 65471
ReadX 13810 1245083 63 63
ReadX 13810 1245146 65471 65471
ReadX 13810 1310617 63 63
ReadX 13810 1310680 65471 65471
ReadX 13810 1376151 63 63
ReadX 13810 1376214 65471 65471
ReadX 13810 1441685 63 63
ReadX 13810 1441748 65471 65471
ReadX 13810 1507219 63 63
ReadX 13810 1507282 65471 65471
ReadX 13810 1572753 63 63
ReadX 13810 1572816 65471 65471
ReadX 13810 1638287 63 63
ReadX 13810 1638350 65471 65471
ReadX 13810 1703821 63 63
ReadX 13810 1703884 65471 65471
ReadX 13810 1769355 63 63
ReadX 13810 1769418 65471 65471
ReadX 13810 1834889 63 63
ReadX 13810 1834952 32824 32824
Close 13810
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\PCBENCHM 1
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13811
Close 13811
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13812
ReadX 13812 0 24 24
Close 13812
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13813
QUERY_FILE_INFORMATION 13813
ReadX 13813 0 512 512
ReadX 13813 464 512 512
ReadX 13813 498 512 512
ReadX 13813 472 512 512
ReadX 13813 466 512 512
ReadX 13813 978 512 512
ReadX 13813 497 57 57
Close 13813
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13814
QUERY_FILE_INFORMATION 13814
ReadX 13814 0 512 512
ReadX 13814 464 512 512
ReadX 13814 498 512 512
ReadX 13814 472 512 512
ReadX 13814 462 512 512
ReadX 13814 468 512 512
ReadX 13814 466 512 512
QUERY_FILE_INFORMATION 13814
WriteX 13814 482 60 60
WriteX 13814 482 4 4
QUERY_FILE_INFORMATION 13814
WriteX 13814 482 11 11
ReadX 13814 497 57 57
ReadX 13814 497 57 57
ReadX 13814 368 4096 4096
ReadX 13814 460 512 512
ReadX 13814 512 4096 4096
ReadX 13814 4608 4096 4096
ReadX 13814 8704 4096 4096
ReadX 13814 12800 4096 4096
ReadX 13814 16896 4096 4096
ReadX 13814 20992 4096 4096
ReadX 13814 25088 4096 4096
ReadX 13814 29184 4096 4096
ReadX 13814 33280 4096 4096
ReadX 13814 37376 4096 4096
ReadX 13814 41472 4096 4096
ReadX 13814 45568 4096 4096
ReadX 13814 49664 4096 4096
ReadX 13814 53760 4096 4096
ReadX 13814 57856 4096 4096
ReadX 13814 61952 4096 4096
ReadX 13814 66048 4096 4096
ReadX 13814 70144 4096 4096
ReadX 13814 497 20 20
ReadX 13814 496 103 103
ReadX 13814 500 448 448
ReadX 13814 470 512 512
ReadX 13814 486 2692 2692
ReadX 13814 290 4096 4096
ReadX 13814 4386 4096 4096
ReadX 13814 8482 4096 4096
ReadX 13814 500 20 20
ReadX 13814 483 108 108
ReadX 13814 482 292 292
ReadX 13814 338 4096 4096
ReadX 13814 4434 3103 3103
ReadX 13814 384 28 28
ReadX 13814 412 20 20
ReadX 13814 432 8 8
ReadX 13814 440 136 136
ReadX 13814 576 8 8
ReadX 13814 584 4 4
ReadX 13814 588 4 4
ReadX 13814 592 39 39
ReadX 13814 384 4 4
ReadX 13814 388 4 4
ReadX 13814 392 23 23
ReadX 13814 385 4 4
ReadX 13814 389 4 4
ReadX 13814 393 12 12
ReadX 13814 405 4 4
ReadX 13814 409 4 4
ReadX 13814 413 1 1
ReadX 13814 385 4 4
ReadX 13814 389 4 4
ReadX 13814 393 1 1
ReadX 13814 385 4 4
ReadX 13814 389 4 4
ReadX 13814 393 12 12
ReadX 13814 405 4 4
ReadX 13814 409 4 4
ReadX 13814 413 2 2
ReadX 13814 385 4 4
ReadX 13814 389 4 4
ReadX 13814 393 25 25
ReadX 13814 385 4 4
ReadX 13814 389 8 8
ReadX 13814 397 4 4
ReadX 13814 401 8 8
ReadX 13814 409 4 4
ReadX 13814 413 8 8
ReadX 13814 421 4 4
ReadX 13814 425 8 8
ReadX 13814 433 4 4
ReadX 13814 437 4 4
ReadX 13814 441 4 4
ReadX 13814 445 4 4
ReadX 13814 449 4 4
ReadX 13814 453 4 4
ReadX 13814 457 4 4
ReadX 13814 461 4 4
ReadX 13814 465 10670 10670
ReadX 13814 428 4096 4096
WriteX 13814 498 512 512
WriteX 13814 472 512 512
WriteX 13814 462 512 512
WriteX 13814 468 512 512
Close 13814
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13815
Close 13815
NTCreateX \clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT 0x40 0x1 13816
QUERY_FILE_INFORMATION 13816
ReadX 13816 0 512 512
ReadX 13816 464 512 512
ReadX 13816 498 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 13817
Close 13817
Unlink \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
FIND_FIRST \clients\client1\~dmtmp\<.JNK
Close 13816
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 13819
WriteX 13819 4607 1 1
QUERY_FILE_INFORMATION 13819
WriteX 13819 0 65471 65471
WriteX 13819 65471 65 65
WriteX 13819 65536 19979 19979
Close 13819
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13820
QUERY_FILE_INFORMATION 13820
ReadX 13820 0 512 512
ReadX 13820 462 512 512
ReadX 13820 974 512 512
ReadX 13820 1486 512 512
ReadX 13820 460 512 512
QUERY_FILE_INFORMATION 13820
QUERY_FILE_INFORMATION 13820
QUERY_FILE_INFORMATION 13820
WriteX 13820 470 448 448
QUERY_FILE_INFORMATION 13820
WriteX 13820 470 60 60
WriteX 13820 470 4 4
QUERY_FILE_INFORMATION 13820
WriteX 13820 470 11 11
QUERY_FILE_INFORMATION 13820
QUERY_FILE_INFORMATION 13820
WriteX 13820 464 512 512
WriteX 13820 976 512 512
WriteX 13820 1488 512 512
WriteX 13820 462 512 512
WriteX 13820 0 512 512
QUERY_FILE_INFORMATION 13820
QUERY_FILE_INFORMATION 13820
ReadX 13820 470 512 512
WriteX 13820 482 512 512
WriteX 13820 482 292 292
QUERY_FILE_INFORMATION 13820
QUERY_FILE_INFORMATION 13820
WriteX 13820 483 20 20
WriteX 13820 483 108 108
QUERY_FILE_INFORMATION 13820
WriteX 13820 484 448 448
QUERY_FILE_INFORMATION 13820
WriteX 13820 484 44 44
WriteX 13820 484 20 20
WriteX 13820 480 512 512
WriteX 13820 472 512 512
WriteX 13820 476 512 512
WriteX 13820 988 512 512
WriteX 13820 474 512 512
Flush 13820
WriteX 13820 0 512 512
Flush 13820
QUERY_FILE_INFORMATION 13820
QUERY_FILE_INFORMATION 13820
QUERY_FILE_INFORMATION 13820
WriteX 13820 480 512 512
WriteX 13820 472 512 512
WriteX 13820 476 512 512
QUERY_FILE_INFORMATION 13820
WriteX 13820 496 320 320
QUERY_FILE_INFORMATION 13820
WriteX 13820 496 60 60
ReadX 13820 484 512 512
WriteX 13820 500 512 512
WriteX 13820 470 512 512
WriteX 13820 486 2692 2692
QUERY_FILE_INFORMATION 13820
QUERY_FILE_INFORMATION 13820
WriteX 13820 497 25 25
WriteX 13820 496 103 103
QUERY_FILE_INFORMATION 13820
QUERY_FILE_INFORMATION 13820
WriteX 13820 497 44 44
WriteX 13820 497 20 20
WriteX 13820 498 512 512
WriteX 13820 462 512 512
WriteX 13820 466 512 512
WriteX 13820 978 512 512
WriteX 13820 464 512 512
Flush 13820
WriteX 13820 0 512 512
Flush 13820
QUERY_FILE_INFORMATION 13820
QUERY_FILE_INFORMATION 13820
QUERY_FILE_INFORMATION 13820
WriteX 13820 497 7 7
WriteX 13820 497 57 57
WriteX 13820 498 512 512
WriteX 13820 472 512 512
WriteX 13820 462 512 512
WriteX 13820 466 512 512
WriteX 13820 978 512 512
Flush 13820
WriteX 13820 498 512 512
Flush 13820
Close 13820
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13821
QUERY_FILE_INFORMATION 13821
ReadX 13821 0 512 512
ReadX 13821 464 512 512
ReadX 13821 498 512 512
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
QUERY_FS_INFORMATION 259
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\ZD16.BMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\ZD16.BMP 0x40 0x1 13822
ReadX 13822 0 20 20
ReadX 13822 14 40 40
ReadX 13822 54 64 64
ReadX 13822 118 1152 1152
Close 13822
Close 13821
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13823
Close 13823
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13824
ReadX 13824 0 24 24
Close 13824
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13825
QUERY_FILE_INFORMATION 13825
ReadX 13825 0 512 512
ReadX 13825 464 512 512
ReadX 13825 498 512 512
ReadX 13825 472 512 512
ReadX 13825 462 512 512
ReadX 13825 466 512 512
ReadX 13825 978 512 512
ReadX 13825 497 57 57
Close 13825
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13826
QUERY_FILE_INFORMATION 13826
ReadX 13826 0 512 512
ReadX 13826 464 512 512
ReadX 13826 498 512 512
ReadX 13826 472 512 512
ReadX 13826 468 512 512
ReadX 13826 462 512 512
ReadX 13826 466 512 512
QUERY_FILE_INFORMATION 13826
WriteX 13826 482 60 60
WriteX 13826 482 4 4
QUERY_FILE_INFORMATION 13826
WriteX 13826 482 11 11
WriteX 13826 498 512 512
WriteX 13826 472 512 512
WriteX 13826 462 512 512
WriteX 13826 466 512 512
WriteX 13826 978 512 512
Close 13826
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP 0x40 0x2 13827
Close 13827
Unlink \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
QUERY_PATH_INFORMATION \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x200000 0x1 13828
Close 13828
Rename \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 -1
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x2 13830
WriteX 13830 4607 1 1
QUERY_FILE_INFORMATION 13830
WriteX 13830 0 65471 65471
WriteX 13830 65471 65 65
WriteX 13830 65536 17654 17654
Close 13830
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13831
QUERY_FILE_INFORMATION 13831
ReadX 13831 0 512 512
ReadX 13831 474 512 512
ReadX 13831 986 512 512
ReadX 13831 1498 512 512
ReadX 13831 472 512 512
QUERY_FILE_INFORMATION 13831
QUERY_FILE_INFORMATION 13831
QUERY_FILE_INFORMATION 13831
WriteX 13831 482 448 448
QUERY_FILE_INFORMATION 13831
WriteX 13831 482 60 60
WriteX 13831 482 4 4
QUERY_FILE_INFORMATION 13831
WriteX 13831 482 11 11
QUERY_FILE_INFORMATION 13831
QUERY_FILE_INFORMATION 13831
WriteX 13831 476 512 512
WriteX 13831 988 512 512
WriteX 13831 1500 512 512
WriteX 13831 474 512 512
WriteX 13831 0 512 512
QUERY_FILE_INFORMATION 13831
QUERY_FILE_INFORMATION 13831
ReadX 13831 482 512 512
WriteX 13831 494 512 512
WriteX 13831 494 292 292
QUERY_FILE_INFORMATION 13831
QUERY_FILE_INFORMATION 13831
WriteX 13831 495 20 20
WriteX 13831 495 108 108
QUERY_FILE_INFORMATION 13831
WriteX 13831 496 448 448
QUERY_FILE_INFORMATION 13831
WriteX 13831 496 44 44
WriteX 13831 496 20 20
WriteX 13831 492 512 512
WriteX 13831 484 512 512
WriteX 13831 488 512 512
WriteX 13831 1000 512 512
WriteX 13831 486 512 512
Flush 13831
WriteX 13831 0 512 512
Flush 13831
QUERY_FILE_INFORMATION 13831
QUERY_FILE_INFORMATION 13831
QUERY_FILE_INFORMATION 13831
WriteX 13831 492 512 512
WriteX 13831 484 512 512
WriteX 13831 488 512 512
QUERY_FILE_INFORMATION 13831
WriteX 13831 508 320 320
QUERY_FILE_INFORMATION 13831
WriteX 13831 508 60 60
ReadX 13831 496 512 512
WriteX 13831 512 512 512
WriteX 13831 482 512 512
WriteX 13831 498 2692 2692
QUERY_FILE_INFORMATION 13831
QUERY_FILE_INFORMATION 13831
WriteX 13831 509 25 25
WriteX 13831 508 103 103
QUERY_FILE_INFORMATION 13831
QUERY_FILE_INFORMATION 13831
WriteX 13831 509 44 44
WriteX 13831 509 20 20
WriteX 13831 510 512 512
WriteX 13831 474 512 512
WriteX 13831 478 512 512
WriteX 13831 990 512 512
WriteX 13831 476 512 512
Flush 13831
WriteX 13831 0 512 512
Flush 13831
QUERY_FILE_INFORMATION 13831
QUERY_FILE_INFORMATION 13831
QUERY_FILE_INFORMATION 13831
WriteX 13831 509 7 7
WriteX 13831 509 57 57
WriteX 13831 510 512 512
WriteX 13831 484 512 512
WriteX 13831 474 512 512
WriteX 13831 478 512 512
WriteX 13831 990 512 512
Flush 13831
WriteX 13831 510 512 512
Flush 13831
Close 13831
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13832
Close 13832
NTCreateX \clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT 0x40 0x1 13833
QUERY_FILE_INFORMATION 13833
ReadX 13833 0 512 512
ReadX 13833 476 512 512
ReadX 13833 510 512 512
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP 0x40 0x1 13834
Close 13834
Unlink \clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP
FIND_FIRST \clients\client1\~dmtmp\<.JNK
QUERY_FS_INFORMATION 259
FIND_FIRST \clients\client1\~dmtmp\<.JNK
NTCreateX \clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA 0x40 0x1 13835
QUERY_FILE_INFORMATION 13835
ReadX 13835 0 512 512
ReadX 13835 512 512 512
ReadX 13835 770 512 512
ReadX 13835 1282 512 512
ReadX 13835 1794 512 512
ReadX 13835 2562 512 512
ReadX 13835 3586 512 512
ReadX 13835 3828 512 512
ReadX 13835 288 512 512
ReadX 13835 1024 512 512
ReadX 13835 954 512 512
ReadX 13835 295 512 512
ReadX 13835 320 512 512
ReadX 13835 322 512 512
ReadX 13835 834 512 512
ReadX 13835 1346 512 512
ReadX 13835 1858 512 512
ReadX 13835 323 512 512
ReadX 13835 835 512 512
ReadX 13835 1347 512 512
ReadX 13835 1859 512 512
ReadX 13835 2371 345 345
ReadX 13835 322 167 167
ReadX 13835 489 512 512
ReadX 13835 1001 512 512
ReadX 13835 1513 512 512
ReadX 13835 2025 512 512
ReadX 13835 2537 512 512
ReadX 13835 3049 512 512
ReadX 13835 3561 345 345
ReadX 13835 323 167 167
ReadX 13835 490 512 512
ReadX 13835 1002 512 512
ReadX 13835 1514 512 512
ReadX 13835 2026 512 512
ReadX 13835 2538 512 512
ReadX 13835 3050 512 512
ReadX 13835 3562 512 512
ReadX 13835 4074 512 512
ReadX 13835 4586 512 512
ReadX 13835 5098 512 512
ReadX 13835 5610 512 512
ReadX 13835 6122 512 512
ReadX 13835 6634 512 512
ReadX 13835 7146 512 512
ReadX 13835 7658 512 512
ReadX 13835 8170 512 512
ReadX 13835 8682 512 512
ReadX 13835 9194 512 512
ReadX 13835 9706 512 512
ReadX 13835 10218 512 512
ReadX 13835 10730 345 345
ReadX 13835 11075 512 512
ReadX 13835 11587 167 167
ReadX 13835 11754 512 512
ReadX 13835 12266 512 512
ReadX 13835 12778 512 512
ReadX 13835 13290 512 512
ReadX 13835 13802 512 512
ReadX 13835 14314 512 512
ReadX 13835 14826 512 512
ReadX 13835 15338 512 512
ReadX 13835 337 512 512
ReadX 13835 337 512 512
ReadX 13835 849 34 34
ReadX 13835 352 512 512
ReadX 13835 864 512 512
ReadX 13835 1376 512 512
ReadX 13835 1888 512 512
ReadX 13835 2400 512 512
ReadX 13835 2912 512 512
ReadX 13835 3424 512 512
ReadX 13835 3936 512 512
ReadX 13835 1632 512 512
ReadX 13835 2144 512 512
ReadX 13835 1682 512 512
ReadX 13835 258 512 512
ReadX 13835 360 144 144
ReadX 13835 2517 512 512
ReadX 13835 3029 512 512
ReadX 13835 1751 512 512
ReadX 13835 2263 512 512
ReadX 13835 2775 512 512
ReadX 13835 3287 512 512
ReadX 13835 3799 512 512
ReadX 13835 4311 512 512
ReadX 13835 4823 512 512
ReadX 13835 5335 512 512
ReadX 13835 5847 512 512
ReadX 13835 6359 512 512
ReadX 13835 6871 512 512
ReadX 13835 7383 512 512
ReadX 13835 7895 512 512
ReadX 13835 8407 512 512
ReadX 13835 8919 512 512
ReadX 13835 9431 512 512
ReadX 13835 9943 512 512
ReadX 13835 10455 512 512
ReadX 13835 10967 512 512
ReadX 13835 11479 512 512
ReadX 13835 2556 512 512
ReadX 13835 3068 512 512
ReadX 13835 3580 512 512
ReadX 13835 4092 512 512
ReadX 13835 4604 512 512
ReadX 13835 5116 512 512
ReadX 13835 5628 512 512
ReadX 13835 6140 512 512
ReadX 13835 6652 512 512
ReadX 13835 7164 512 512
ReadX 13835 7676 512 512
ReadX 13835 8188 512 512
ReadX 13835 8700 512 512
ReadX 13835 9212 512 512
ReadX 13835 9724 512 512
ReadX 13835 10236 512 512
ReadX 13835 10748 512 512
ReadX 13835 11260 512 512
ReadX 13835 11772 512 512
ReadX 13835 12284 512 512
ReadX 13835 12796 49 49
ReadX 13835 260 463 463
ReadX 13835 723 512 512
ReadX 13835 1235 512 512
ReadX 13835 1747 512 512
ReadX 13835 2259 512 512
ReadX 13835 2771 512 512
ReadX 13835 3283 512 512
ReadX 13835 3795 512 512
ReadX 13835 4307 512 512
ReadX 13835 4819 512 512
ReadX 13835 5331 512 512
ReadX 13835 5843 512 512
ReadX 13835 6355 512 512
ReadX 13835 6867 512 512
ReadX 13835 7379 512 512
ReadX 13835 7891 512 512
ReadX 13835 8403 512 512
ReadX 13835 8915 512 512
ReadX 13835 9427 512 512
ReadX 13835 9939 512 512
ReadX 13835 10451 512 512
ReadX 13835 10963 402 402
ReadX 13835 593 240 240
ReadX 13835 2048 272 272
ReadX 13835 2320 512 512
ReadX 13835 2832 512 512
ReadX 13835 3344 512 512
ReadX 13835 3856 512 512
ReadX 13835 4368 512 512
ReadX 13835 4880 512 512
ReadX 13835 5392 240 240
ReadX 13835 608 272 272
ReadX 13835 880 512 512
ReadX 13835 1392 512 512
ReadX 13835 1904 512 512
ReadX 13835 2416 512 512
ReadX 13835 2928 512 512
ReadX 13835 3440 512 512
ReadX 13835 3952 512 512
ReadX 13835 4464 512 512
ReadX 13835 4976 512 512
ReadX 13835 5488 512 512
ReadX 13835 6000 512 512
ReadX 13835 6512 512 512
ReadX 13835 7024 512 512
ReadX 13835 7536 512 512
ReadX 13835 8048 512 512
ReadX 13835 8560 512 512
ReadX 13835 9072 512 512
ReadX 13835 9584 512 512
ReadX 13835 10096 512 512
ReadX 13835 1683 512 512
ReadX 13835 514 512 512
ReadX 13835 620 512 512
ReadX 13835 770 512 512
ReadX 13835 1282 512 512
ReadX 13835 1794 512 512
ReadX 13835 2000 512 512
ReadX 13835 1434 512 512
ReadX 13835 2050 512 512
ReadX 13835 2118 512 512
ReadX 13835 1715 512 512
ReadX 13835 1024 512 512
ReadX 13835 954 512 512
ReadX 13835 1880 512 512
ReadX 13835 1286 512 512
ReadX 13835 1510 512 512
ReadX 13835 2562 512 512
ReadX 13835 2610 512 512
ReadX 13835 3586 512 512
ReadX 13835 3812 512 512
ReadX 13835 3828 512 512
ReadX 13835 4046 512 512
ReadX 13835 4066 512 512
ReadX 13835 1747 512 512
ReadX 13835 1026 512 512
ReadX 13835 1538 512 512
ReadX 13835 514 512 512
ReadX 13835 751 512 512
ReadX 13835 1263 512 512
ReadX 13835 620 512 512
ReadX 13835 1132 512 512
ReadX 13835 1644 512 512
ReadX 13835 2156 512 512
ReadX 13835 2668 512 512
ReadX 13835 3180 512 512
ReadX 13835 3692 512 512
ReadX 13835 4204 394 394
ReadX 13835 606 118 118
ReadX 13835 724 512 512
ReadX 13835 1236 512 512
ReadX 13835 1748 512 512
ReadX 13835 2260 512 512
ReadX 13835 2772 512 512
ReadX 13835 3284 512 512
ReadX 13835 3796 394 394
ReadX 13835 636 118 118
ReadX 13835 754 512 512
ReadX 13835 1266 512 512
ReadX 13835 1778 512 512
ReadX 13835 2290 512 512
ReadX 13835 2802 512 512
ReadX 13835 3314 512 512
ReadX 13835 3826 512 512
ReadX 13835 4338 512 512
ReadX 13835 4850 512 512
ReadX 13835 5362 512 512
ReadX 13835 5874 512 512
ReadX 13835 6386 512 512
ReadX 13835 6898 512 512
ReadX 13835 7410 512 512
ReadX 13835 7922 512 512
ReadX 13835 8434 512 512
ReadX 13835 8946 512 512
ReadX 13835 9458 512 512
ReadX 13835 9970 512 512
ReadX 13835 10482 512 512
ReadX 13835 723 512 512
ReadX 13835 1235 512 512
ReadX 13835 725 512 512
ReadX 13835 729 512 512
ReadX 13835 1241 512 512
ReadX 13835 1753 512 512
ReadX 13835 2265 512 512
ReadX 13835 2777 512 512
ReadX 13835 3289 512 512
ReadX 13835 3801 512 512
ReadX 13835 4313 512 512
ReadX 13835 4825 512 512
ReadX 13835 5337 512 512
ReadX 13835 5849 512 512
ReadX 13835 6361 512 512
ReadX 13835 755 512 512
ReadX 13835 1267 512 512
ReadX 13835 1779 512 512
ReadX 13835 2291 512 512
ReadX 13835 2803 512 512
ReadX 13835 3315 512 512
ReadX 13835 3827 512 512
ReadX 13835 4339 244 244
ReadX 13835 4583 512 512
ReadX 13835 5095 268 268
ReadX 13835 5363 512 512
ReadX 13835 5875 512 512
ReadX 13835 6387 512 512
ReadX 13835 6899 512 512
ReadX 13835 7411 512 512
ReadX 13835 7923 512 512
ReadX 13835 8435 512 512
ReadX 13835 8947 512 512
ReadX 13835 9459 512 512
ReadX 13835 9971 512 512
ReadX 13835 10483 512 512
ReadX 13835 10995 512 512
ReadX 13835 11507 512 512
ReadX 13835 12019 512 512
ReadX 13835 12531 512 512
ReadX 13835 13043 512 512
ReadX 13835 13555 512 512
ReadX 13835 14067 512 512
ReadX 13835 14579 512 512
ReadX 13835 15091 512 512
ReadX 13835 15603 342 342
ReadX 13835 725 512 512
ReadX 13835 2000 512 512
ReadX 13835 3918 512 512
ReadX 13835 727 512 512
ReadX 13835 258 512 512
ReadX 13835 376 512 512
ReadX 13835 1109 512 512
ReadX 13835 1028 512 512
ReadX 13835 1540 512 512
ReadX 13835 2052 512 512
ReadX 13835 2564 512 512
ReadX 13835 3076 512 512
ReadX 13835 3588 512 512
ReadX 13835 4100 512 512
ReadX 13835 4612 412 412
ReadX 13835 1012 100 100
ReadX 13835 1112 512 512
ReadX 13835 1624 512 512
ReadX 13835 2136 512 512
ReadX 13835 2648 512 512
ReadX 13835 3160 512 512
ReadX 13835 3672 512 512
ReadX 13835 4184 412 412
ReadX 13835 1044 100 100
ReadX 13835 1144 512 512
ReadX 13835 1656 512 512
ReadX 13835 2168 512 512
ReadX 13835 2680 512 512
ReadX 13835 3192 512 512
ReadX 13835 3704 512 512
ReadX 13835 4216 512 512
ReadX 13835 4728 512 512
ReadX 13835 5240 512 512
ReadX 13835 5752 512 512
ReadX 13835 6264 512 512
ReadX 13835 6776 512 512
QUERY_FS_INFORMATION 259
ReadX 13835 7288 512 512
ReadX 13835 7800 512 512
ReadX 13835 8312 512 512
ReadX 13835 8824 512 512
ReadX 13835 9336 512 512
ReadX 13835 9848 512 512
ReadX 13835 10360 512 512
ReadX 13835 10872 512 512
ReadX 13835 11384 512 512
ReadX 13835 11896 512 512
ReadX 13835 12408 512 512
ReadX 13835 1088 512 512
ReadX 13835 1600 512 512
ReadX 13835 1090 512 512
ReadX 13835 1094 512 512
ReadX 13835 1606 512 512
ReadX 13835 2118 512 512
ReadX 13835 2630 512 512
ReadX 13835 3142 512 512
ReadX 13835 3654 512 512
ReadX 13835 4166 512 512
ReadX 13835 4678 512 512
ReadX 13835 1111 512 512
ReadX 13835 1623 512 512
ReadX 13835 2135 512 512
ReadX 13835 2647 512 512
ReadX 13835 3159 512 512
ReadX 13835 3671 512 512
ReadX 13835 4183 512 512
ReadX 13835 4695 512 512
ReadX 13835 5207 512 512
ReadX 13835 5719 512 512
ReadX 13835 6231 512 512
ReadX 13835 6743 512 512
ReadX 13835 7255 512 512
ReadX 13835 7767 512 512
ReadX 13835 8279 512 512
ReadX 13835 8791 512 512
ReadX 13835 9303 512 512
ReadX 13835 9815 512 512
ReadX 13835 10327 512 512
ReadX 13835 10839 512 512
ReadX 13835 11351 294 294
ReadX 13835 1091 512 512
ReadX 13835 970 512 512
ReadX 13835 1093 512 512
ReadX 13835 1434 512 512
ReadX 13835 2050 512 512
ReadX 13835 2158 512 512
ReadX 13835 2118 512 512
ReadX 13835 2630 512 512
ReadX 13835 3142 512 512
ReadX 13835 3654 512 512
ReadX 13835 4166 512 512
ReadX 13835 4678 512 512
ReadX 13835 5190 512 512
ReadX 13835 5702 382 382
ReadX 13835 2104 130 130
ReadX 13835 2234 512 512
ReadX 13835 2746 512 512
ReadX 13835 3258 512 512
ReadX 13835 3770 512 512
ReadX 13835 4282 512 512
ReadX 13835 4794 512 512
ReadX 13835 5306 382 382
ReadX 13835 2134 130 130
ReadX 13835 2264 512 512
ReadX 13835 2776 512 512
ReadX 13835 3288 512 512
ReadX 13835 3800 512 512
ReadX 13835 4312 512 512
ReadX 13835 4824 512 512
ReadX 13835 5336 512 512
ReadX 13835 2147 512 512
ReadX 13835 2149 512 512
ReadX 13835 2152 512 512
ReadX 13835 2664 512 512
ReadX 13835 3176 512 512
ReadX 13835 3688 512 512
ReadX 13835 2159 512 512
ReadX 13835 2671 512 512
ReadX 13835 3183 512 512
ReadX 13835 3695 512 512
ReadX 13835 4207 512 512
ReadX 13835 4719 512 512
ReadX 13835 5231 512 512
ReadX 13835 5743 512 512
ReadX 13835 6255 512 512
ReadX 13835 6767 512 512
ReadX 13835 7279 512 512
ReadX 13835 7791 512 512
ReadX 13835 8303 512 512
ReadX 13835 8815 512 512
ReadX 13835 9327 512 512
ReadX 13835 9839 512 512
ReadX 13835 10351 512 512
ReadX 13835 10863 512 512
ReadX 13835 11375 512 512
ReadX 13835 11887 512 512
ReadX 13835 12399 38 38
ReadX 13835 2149 512 512
ReadX 13835 1794 512 512
ReadX 13835 2016 512 512
ReadX 13835 2151 512 512
ReadX 13835 1918 512 512
ReadX 13835 1880 512 512
ReadX 13835 2392 512 512
ReadX 13835 2904 512 512
ReadX 13835 3416 512 512
ReadX 13835 3928 512 512
ReadX 13835 4440 512 512
ReadX 13835 4952 512 512
ReadX 13835 5464 416 416
ReadX 13835 1866 96 96
ReadX 13835 1962 512 512
ReadX 13835 2474 512 512
ReadX 13835 2986 512 512
ReadX 13835 3498 512 512
ReadX 13835 4010 512 512
ReadX 13835 4522 512 512
ReadX 13835 5034 416 416
ReadX 13835 1896 96 96
ReadX 13835 1992 512 512
ReadX 13835 2504 512 512
ReadX 13835 3016 512 512
ReadX 13835 3528 512 512
ReadX 13835 1903 512 512
ReadX 13835 1905 512 512
ReadX 13835 1908 512 512
ReadX 13835 2420 512 512
ReadX 13835 2932 512 512
ReadX 13835 3444 512 512
ReadX 13835 3956 512 512
ReadX 13835 1919 512 512
ReadX 13835 2431 512 512
ReadX 13835 2943 512 512
ReadX 13835 3455 512 512
ReadX 13835 3967 512 512
ReadX 13835 4479 512 512
ReadX 13835 4991 512 512
ReadX 13835 5503 512 512
ReadX 13835 6015 512 512
ReadX 13835 6527 512 512
ReadX 13835 7039 512 512
ReadX 13835 7551 512 512
ReadX 13835 8063 512 512
ReadX 13835 8575 512 512
ReadX 13835 9087 512 512
ReadX 13835 9599 512 512
ReadX 13835 10111 512 512
ReadX 13835 10623 512 512
ReadX 13835 11135 512 512
ReadX 13835 11647 512 512
ReadX 13835 12159 322 322
ReadX 13835 1905 512 512
ReadX 13835 1846 512 512
ReadX 13835 1907 512 512
ReadX 13835 1860 268 268
ReadX 13835 1832 244 244
ReadX 13835 1846 512 512
ReadX 13835 2358 512 512
ReadX 13835 2870 512 512
ReadX 13835 3382 512 512
ReadX 13835 3894 512 512
ReadX 13835 4406 512 512
ReadX 13835 4918 512 512
ReadX 13835 1858 512 512
ReadX 13835 1859 512 512
ReadX 13835 1860 488 488
ReadX 13835 1832 24 24
ReadX 13835 1861 228 228
ReadX 13835 1832 284 284
ReadX 13835 2116 512 512
ReadX 13835 2628 512 512
ReadX 13835 3140 512 512
ReadX 13835 3652 512 512
ReadX 13835 4164 512 512
ReadX 13835 4676 512 512
ReadX 13835 5188 228 228
ReadX 13835 1862 284 284
ReadX 13835 2146 512 512
ReadX 13835 2658 38 38
ReadX 13835 1859 512 512
ReadX 13835 2047 512 512
ReadX 13835 2016 512 512
ReadX 13835 2528 512 512
ReadX 13835 3040 512 512
ReadX 13835 3552 512 512
ReadX 13835 4064 512 512
ReadX 13835 4576 512 512
ReadX 13835 5088 512 512
ReadX 13835 5600 424 424
ReadX 13835 2002 88 88
ReadX 13835 2090 512 512
ReadX 13835 2602 512 512
ReadX 13835 3114 512 512
ReadX 13835 3626 512 512
ReadX 13835 4138 512 512
ReadX 13835 4650 512 512
ReadX 13835 5162 424 424
ReadX 13835 2032 88 88
ReadX 13835 2120 512 512
ReadX 13835 2632 512 512
ReadX 13835 3144 512 512
ReadX 13835 3656 512 512
ReadX 13835 4168 512 512
ReadX 13835 4680 512 512
ReadX 13835 5192 512 512
ReadX 13835 2044 512 512
ReadX 13835 2045 512 512
ReadX 13835 2046 512 512
ReadX 13835 2047 512 512
ReadX 13835 2559 110 110
ReadX 13835 2052 402 402
ReadX 13835 2454 512 512
ReadX 13835 2966 512 512
ReadX 13835 3478 512 512
ReadX 13835 3990 512 512
ReadX 13835 4502 512 512
ReadX 13835 5014 512 512
ReadX 13835 5526 512 512
ReadX 13835 6038 512 512
ReadX 13835 6550 512 512
ReadX 13835 7062 512 512
ReadX 13835 7574 512 512
ReadX 13835 8086 512 512
ReadX 13835 8598 512 512
ReadX 13835 9110 512 512
ReadX 13835 9622 512 512
ReadX 13835 10134 512 512
ReadX 13835 10646 512 512
ReadX 13835 11158 512 512
ReadX 13835 11670 512 512
ReadX 13835 12182 512 512
ReadX 13835 12694 118 118
ReadX 13835 2045 512 512
ReadX 13835 1282 512 512
ReadX 13835 1343 512 512
ReadX 13835 1286 512 512
ReadX 13835 1798 512 512
ReadX 13835 2310 512 512
ReadX 13835 2822 512 512
ReadX 13835 3334 512 512
ReadX 13835 3846 512 512
ReadX 13835 4358 512 512
ReadX 13835 4870 416 416
ReadX 13835 1270 96 96
ReadX 13835 1366 512 512
ReadX 13835 1878 512 512
ReadX 13835 2390 512 512
ReadX 13835 2902 512 512
ReadX 13835 3414 512 512
ReadX 13835 3926 416 416
ReadX 13835 1284 96 96
ReadX 13835 1380 416 416
ReadX 13835 1302 96 96
ReadX 13835 1398 512 512
ReadX 13835 1910 512 512
ReadX 13835 2422 512 512
ReadX 13835 2934 512 512
ReadX 13835 3446 512 512
ReadX 13835 3958 512 512
ReadX 13835 4470 512 512
ReadX 13835 4982 512 512
ReadX 13835 5494 512 512
ReadX 13835 6006 512 512
ReadX 13835 6518 512 512
ReadX 13835 7030 512 512
ReadX 13835 7542 512 512
ReadX 13835 1328 512 512
ReadX 13835 1330 512 512
ReadX 13835 1333 512 512
ReadX 13835 1845 512 512
ReadX 13835 2357 512 512
ReadX 13835 2869 512 512
ReadX 13835 3381 512 512
ReadX 13835 1344 512 512
ReadX 13835 1856 512 512
ReadX 13835 2368 512 512
ReadX 13835 2880 512 512
ReadX 13835 3392 512 512
ReadX 13835 3904 512 512
ReadX 13835 4416 512 512
ReadX 13835 4928 512 512
ReadX 13835 5440 512 512
ReadX 13835 5952 512 512
ReadX 13835 6464 512 512
ReadX 13835 6976 512 512
ReadX 13835 7488 512 512
ReadX 13835 8000 512 512
ReadX 13835 8512 512 512
ReadX 13835 9024 512 512
ReadX 13835 9536 512 512
ReadX 13835 10048 512 512
ReadX 13835 10560 512 512
ReadX 13835 11072 512 512
ReadX 13835 11584 426 426
ReadX 13835 1330 512 512
ReadX 13835 1842 512 512
ReadX 13835 1250 512 512
ReadX 13835 1264 268 268
ReadX 13835 1236 244 244
ReadX 13835 1250 512 512
ReadX 13835 1762 512 512
ReadX 13835 2274 512 512
ReadX 13835 2786 512 512
ReadX 13835 3298 512 512
ReadX 13835 3810 512 512
ReadX 13835 4322 512 512
ReadX 13835 1262 512 512
ReadX 13835 1263 512 512
ReadX 13835 1264 488 488
ReadX 13835 1236 24 24
ReadX 13835 1265 228 228
ReadX 13835 1236 284 284
ReadX 13835 1520 512 512
ReadX 13835 2032 512 512
ReadX 13835 2544 512 512
ReadX 13835 3056 512 512
ReadX 13835 3568 512 512
ReadX 13835 4080 512 512
ReadX 13835 4592 228 228
ReadX 13835 1266 284 284
ReadX 13835 1550 512 512
ReadX 13835 2062 42 42
ReadX 13835 1263 512 512
ReadX 13835 1538 512 512
ReadX 13835 1640 512 512
ReadX 13835 1510 512 512
ReadX 13835 2022 512 512
ReadX 13835 2534 512 512
ReadX 13835 3046 512 512
ReadX 13835 3558 512 512
ReadX 13835 4070 512 512
ReadX 13835 4582 512 512
ReadX 13835 5094 408 408
ReadX 13835 1496 104 104
ReadX 13835 1600 512 512
ReadX 13835 2112 512 512
ReadX 13835 2624 512 512
ReadX 13835 3136 512 512
ReadX 13835 3648 512 512
ReadX 13835 4160 512 512
ReadX 13835 4672 408 408
ReadX 13835 1526 104 104
ReadX 13835 1630 512 512
ReadX 13835 2142 512 512
ReadX 13835 2654 512 512
ReadX 13835 3166 512 512
ReadX 13835 3678 512 512
ReadX 13835 4190 408 408
ReadX 13835 1540 104 104
ReadX 13835 1644 512 512
ReadX 13835 2156 512 512
ReadX 13835 2668 512 512
ReadX 13835 3180 512 512
ReadX 13835 3692 512 512
ReadX 13835 4204 512 512
ReadX 13835 4716 512 512
ReadX 13835 5228 512 512
ReadX 13835 5740 512 512
ReadX 13835 6252 512 512
ReadX 13835 6764 512 512
ReadX 13835 7276 512 512
ReadX 13835 7788 512 512
ReadX 13835 8300 512 512
ReadX 13835 8812 512 512
ReadX 13835 9324 512 512
ReadX 13835 9836 512 512
ReadX 13835 10348 512 512
ReadX 13835 10860 512 512
ReadX 13835 11372 512 512
ReadX 13835 1615 512 512
ReadX 13835 2127 512 512
ReadX 13835 1617 512 512
ReadX 13835 1621 512 512
ReadX 13835 2133 512 512
ReadX 13835 2645 512 512
ReadX 13835 3157 512 512
ReadX 13835 3669 512 512
ReadX 13835 4181 512 512
ReadX 13835 4693 512 512
ReadX 13835 5205 512 512
ReadX 13835 5717 512 512
ReadX 13835 6229 512 512
ReadX 13835 1641 512 512
ReadX 13835 2153 512 512
ReadX 13835 2665 512 512
ReadX 13835 3177 512 512
ReadX 13835 3689 512 512
ReadX 13835 4201 512 512
ReadX 13835 4713 512 512
ReadX 13835 5225 512 512
ReadX 13835 5737 512 512
ReadX 13835 6249 512 512
ReadX 13835 6761 512 512
ReadX 13835 7273 512 512
ReadX 13835 7785 512 512
ReadX 13835 8297 512 512
ReadX 13835 8809 512 512
ReadX 13835 9321 512 512
ReadX 13835 9833 512 512
ReadX 13835 10345 512 512
ReadX 13835 10857 512 512
ReadX 13835 11369 512 512
ReadX 13835 11881 2 2
ReadX 13835 1796 510 510
ReadX 13835 2306 512 512
ReadX 13835 2818 512 512
ReadX 13835 3330 512 512
ReadX 13835 3842 512 512
ReadX 13835 4354 512 512
ReadX 13835 4866 512 512
ReadX 13835 5378 512 512
ReadX 13835 5890 512 512
ReadX 13835 6402 512 512
ReadX 13835 6914 512 512
ReadX 13835 7426 512 512
ReadX 13835 7938 512 512
ReadX 13835 8450 512 512
ReadX 13835 8962 512 512
ReadX 13835 9474 512 512
ReadX 13835 9986 512 512
ReadX 13835 10498 326 326
ReadX 13835 1617 512 512
ReadX 13835 2129 512 512
ReadX 13835 1450 512 512
ReadX 13835 1621 512 512
ReadX 13835 1446 512 512
ReadX 13835 1450 512 512
ReadX 13835 1962 512 512
ReadX 13835 2474 512 512
ReadX 13835 2986 512 512
ReadX 13835 3498 512 512
ReadX 13835 4010 512 512
ReadX 13835 4522 512 512
ReadX 13835 5034 424 424
ReadX 13835 1436 88 88
ReadX 13835 1524 512 512
ReadX 13835 2036 512 512
ReadX 13835 2548 512 512
ReadX 13835 3060 512 512
ReadX 13835 1442 512 512
ReadX 13835 1443 512 512
ReadX 13835 1444 512 512
ReadX 13835 1446 512 512
ReadX 13835 1958 386 386
ReadX 13835 1466 126 126
ReadX 13835 1592 512 512
ReadX 13835 2104 512 512
ReadX 13835 2616 512 512
ReadX 13835 3128 512 512
ReadX 13835 3640 512 512
ReadX 13835 4152 512 512
ReadX 13835 4664 512 512
ReadX 13835 5176 512 512
ReadX 13835 5688 512 512
ReadX 13835 6200 512 512
ReadX 13835 6712 512 512
ReadX 13835 7224 512 512
ReadX 13835 7736 512 512
ReadX 13835 8248 512 512
ReadX 13835 8760 294 294
ReadX 13835 1443 512 512
ReadX 13835 964 512 512
ReadX 13835 970 512 512
ReadX 13835 1482 512 512
ReadX 13835 1994 512 512
ReadX 13835 2506 512 512
ReadX 13835 3018 512 512
ReadX 13835 3530 512 512
ReadX 13835 4042 512 512
ReadX 13835 4554 424 424
ReadX 13835 956 88 88
ReadX 13835 1044 512 512
ReadX 13835 1556 512 512
ReadX 13835 2068 512 512
ReadX 13835 2580 512 512
ReadX 13835 962 512 512
ReadX 13835 963 512 512
ReadX 13835 964 512 512
ReadX 13835 965 512 512
ReadX 13835 1477 512 512
ReadX 13835 1989 228 228
ReadX 13835 986 284 284
ReadX 13835 1270 512 512
ReadX 13835 1782 512 512
ReadX 13835 2294 512 512
ReadX 13835 2806 512 512
ReadX 13835 3318 512 512
ReadX 13835 3830 512 512
ReadX 13835 4342 512 512
ReadX 13835 4854 512 512
ReadX 13835 5366 512 512
ReadX 13835 5878 512 512
ReadX 13835 6390 512 512
ReadX 13835 6902 512 512
ReadX 13835 7414 42 42
ReadX 13835 963 512 512
ReadX 13835 2610 512 512
ReadX 13835 3812 512 512
ReadX 13835 3828 512 512
ReadX 13835 3969 512 512
ReadX 13835 3918 512 512
ReadX 13835 4430 512 512
ReadX 13835 4942 512 512
ReadX 13835 5454 512 512
ReadX 13835 5966 512 512
ReadX 13835 6478 512 512
ReadX 13835 6990 512 512
ReadX 13835 7502 424 424
ReadX 13835 3904 88 88
ReadX 13835 3992 512 512
ReadX 13835 4504 512 512
ReadX 13835 5016 512 512
ReadX 13835 5528 512 512
ReadX 13835 6040 512 512
ReadX 13835 6552 512 512
ReadX 13835 7064 424 424
ReadX 13835 3934 88 88
ReadX 13835 4022 512 512
ReadX 13835 4534 512 512
ReadX 13835 5046 512 512
ReadX 13835 5558 512 512
ReadX 13835 6070 512 512
ReadX 13835 6582 512 512
ReadX 13835 7094 512 512
ReadX 13835 7606 512 512
ReadX 13835 8118 512 512
ReadX 13835 8630 512 512
ReadX 13835 3953 512 512
ReadX 13835 4465 512 512
ReadX 13835 3956 512 512
ReadX 13835 3964 512 512
ReadX 13835 4476 512 512
ReadX 13835 4988 512 512
ReadX 13835 3970 512 512
ReadX 13835 4482 512 512
ReadX 13835 4994 512 512
ReadX 13835 5506 512 512
ReadX 13835 6018 512 512
ReadX 13835 6530 512 512
ReadX 13835 7042 512 512
ReadX 13835 7554 512 512
ReadX 13835 8066 512 512
ReadX 13835 8578 512 512
ReadX 13835 9090 512 512
ReadX 13835 9602 512 512
ReadX 13835 10114 512 512
ReadX 13835 10626 512 512
ReadX 13835 11138 512 512
ReadX 13835 11650 512 512
ReadX 13835 12162 512 512
ReadX 13835 12674 512 512
ReadX 13835 13186 512 512
ReadX 13835 13698 512 512
ReadX 13835 14210 134 134
ReadX 13835 3956 512 512
ReadX 13835 4468 512 512
ReadX 13835 4980 512 512
ReadX 13835 5492 512 512
ReadX 13835 3074 512 512
ReadX 13835 3246 512 512
ReadX 13835 3964 512 512
ReadX 13835 3330 512 512
ReadX 13835 3465 512 512
ReadX 13835 3246 512 512
ReadX 13835 3758 512 512
ReadX 13835 4270 512 512
ReadX 13835 4782 512 512
ReadX 13835 5294 512 512
ReadX 13835 5806 512 512
ReadX 13835 6318 512 512
ReadX 13835 6830 368 368
ReadX 13835 3232 144 144
ReadX 13835 3376 512 512
ReadX 13835 3888 512 512
ReadX 13835 4400 512 512
ReadX 13835 4912 512 512
ReadX 13835 5424 512 512
ReadX 13835 5936 512 512
ReadX 13835 6448 368 368
ReadX 13835 3262 144 144
ReadX 13835 3406 512 512
ReadX 13835 3918 512 512
ReadX 13835 4430 512 512
ReadX 13835 4942 512 512
ReadX 13835 5454 512 512
ReadX 13835 5966 512 512
ReadX 13835 6478 512 512
ReadX 13835 6990 512 512
ReadX 13835 7502 512 512
ReadX 13835 8014 512 512
ReadX 13835 8526 512 512
ReadX 13835 9038 512 512
ReadX 13835 9550 512 512
ReadX 13835 10062 512 512
ReadX 13835 10574 512 512
ReadX 13835 11086 512 512
ReadX 13835 11598 512 512
ReadX 13835 12110 512 512
ReadX 13835 12622 512 512
ReadX 13835 13134 512 512
ReadX 13835 13646 368 368
ReadX 13835 3332 144 144
ReadX 13835 3476 512 512
ReadX 13835 3988 512 512
ReadX 13835 4500 512 512
ReadX 13835 5012 512 512
ReadX 13835 5524 512 512
ReadX 13835 6036 512 512
ReadX 13835 6548 512 512
ReadX 13835 7060 512 512
ReadX 13835 7572 512 512
ReadX 13835 8084 512 512
ReadX 13835 8596 512 512
ReadX 13835 9108 512 512
ReadX 13835 9620 512 512
ReadX 13835 10132 512 512
ReadX 13835 10644 512 512
ReadX 13835 11156 512 512
ReadX 13835 11668 512 512
ReadX 13835 12180 512 512
ReadX 13835 12692 512 512
ReadX 13835 13204 512 512
ReadX 13835 3430 512 512
ReadX 13835 3942 512 512
ReadX 13835 3434 512 512
ReadX 13835 3435 512 512
ReadX 13835 3947 512 512
ReadX 13835 4459 512 512
ReadX 13835 4971 512 512
ReadX 13835 5483 512 512
ReadX 13835 5995 512 512
ReadX 13835 6507 512 512
ReadX 13835 7019 512 512
ReadX 13835 7531 512 512
ReadX 13835 8043 512 512
ReadX 13835 8555 512 512
ReadX 13835 9067 512 512
ReadX 13835 9579 512 512
ReadX 13835 10091 512 512
ReadX 13835 10603 512 512
ReadX 13835 11115 512 512
ReadX 13835 3467 512 512
ReadX 13835 3979 512 512
ReadX 13835 4491 512 512
ReadX 13835 5003 512 512
ReadX 13835 5515 512 512
ReadX 13835 6027 512 512
ReadX 13835 6539 512 512
ReadX 13835 7051 512 512
ReadX 13835 7563 512 512
ReadX 13835 8075 512 512
ReadX 13835 8587 512 512
ReadX 13835 9099 512 512
ReadX 13835 9611 512 512
ReadX 13835 10123 512 512
ReadX 13835 10635 512 512
ReadX 13835 11147 512 512
ReadX 13835 11659 512 512
ReadX 13835 12171 512 512
ReadX 13835 12683 512 512
ReadX 13835 13195 512 512
ReadX 13835 13707 56 56
ReadX 13835 13763 512 512
ReadX 13835 14275 456 456
ReadX 13835 14731 512 512
ReadX 13835 15243 512 512
ReadX 13835 15755 512 512
ReadX 13835 16267 512 512
ReadX 13835 16779 512 512
ReadX 13835 17291 512 512
ReadX 13835 17803 512 512
ReadX 13835 18315 512 512
ReadX 13835 18827 512 512
ReadX 13835 19339 512 512
ReadX 13835 19851 512 512
ReadX 13835 20363 512 512
ReadX 13835 20875 512 512
ReadX 13835 21387 512 512
ReadX 13835 21899 512 512
ReadX 13835 22411 512 512
ReadX 13835 22923 512 512
ReadX 13835 23435 512 512
ReadX 13835 23947 512 512
ReadX 13835 24459 512 512
ReadX 13835 24971 282 282
ReadX 13835 3434 512 512
ReadX 13835 2818 512 512
ReadX 13835 2870 512 512
ReadX 13835 3026 512 512
ReadX 13835 3538 512 512
ReadX 13835 2870 512 512
ReadX 13835 3382 512 512
ReadX 13835 3894 512 512
ReadX 13835 4406 512 512
ReadX 13835 4918 512 512
ReadX 13835 5430 512 512
ReadX 13835 5942 512 512
ReadX 13835 6454 374 374
ReadX 13835 2856 138 138
ReadX 13835 2994 512 512
ReadX 13835 3506 512 512
ReadX 13835 4018 512 512
ReadX 13835 4530 512 512
ReadX 13835 5042 512 512
ReadX 13835 5554 512 512
ReadX 13835 6066 374 374
ReadX 13835 2886 138 138
ReadX 13835 3024 512 512
ReadX 13835 3536 512 512
ReadX 13835 4048 512 512
ReadX 13835 4560 512 512
ReadX 13835 5072 512 512
ReadX 13835 5584 512 512
ReadX 13835 6096 512 512
ReadX 13835 6608 512 512
ReadX 13835 7120 512 512
ReadX 13835 7632 512 512
ReadX 13835 8144 512 512
ReadX 13835 8656 512 512
ReadX 13835 9168 512 512
ReadX 13835 9680 512 512
ReadX 13835 10192 512 512
ReadX 13835 10704 512 512
ReadX 13835 11216 512 512
ReadX 13835 11728 512 512
ReadX 13835 12240 512 512
ReadX 13835 12752 512 512
QUERY_FS_INFORMATION 259
ReadX 13835 13264 512 512
ReadX 13835 13776 512 512
ReadX 13835 14288 512 512
ReadX 13835 14800 512 512
ReadX 13835 15312 512 512
ReadX 13835 15824 512 512
ReadX 13835 16336 512 512
ReadX 13835 16848 512 512
ReadX 13835 17360 512 512
ReadX 13835 17872 512 512
ReadX 13835 18384 512 512
ReadX 13835 18896 512 512
ReadX 13835 19408 512 512
ReadX 13835 19920 512 512
ReadX 13835 20432 512 512
ReadX 13835 20944 512 512
ReadX 13835 21456 512 512
ReadX 13835 21968 512 512
ReadX 13835 22480 512 512
ReadX 13835 22992 512 512
ReadX 13835 2998 512 512
ReadX 13835 3510 512 512
ReadX 13835 3001 512 512
ReadX 13835 3003 512 512
ReadX 13835 3515 512 512
ReadX 13835 4027 512 512
ReadX 13835 4539 512 512
ReadX 13835 5051 512 512
ReadX 13835 5563 512 512
ReadX 13835 6075 512 512
ReadX 13835 6587 512 512
ReadX 13835 7099 512 512
ReadX 13835 7611 512 512
ReadX 13835 8123 512 512
ReadX 13835 8635 512 512
ReadX 13835 3029 512 512
ReadX 13835 3541 512 512
ReadX 13835 4053 512 512
ReadX 13835 4565 512 512
ReadX 13835 5077 512 512
ReadX 13835 5589 512 512
ReadX 13835 6101 512 512
ReadX 13835 6613 512 512
ReadX 13835 7125 512 512
ReadX 13835 7637 512 512
ReadX 13835 8149 512 512
ReadX 13835 8661 512 512
ReadX 13835 9173 512 512
ReadX 13835 9685 512 512
ReadX 13835 10197 512 512
ReadX 13835 10709 512 512
ReadX 13835 11221 512 512
ReadX 13835 11733 512 512
ReadX 13835 12245 512 512
ReadX 13835 12757 512 512
ReadX 13835 13269 40 40
ReadX 13835 3076 472 472
ReadX 13835 3548 512 512
ReadX 13835 4060 512 512
ReadX 13835 4572 512 512
ReadX 13835 5084 512 512
ReadX 13835 5596 512 512
ReadX 13835 6108 512 512
ReadX 13835 6620 512 512
ReadX 13835 7132 512 512
ReadX 13835 7644 512 512
ReadX 13835 8156 512 512
ReadX 13835 8668 512 512
ReadX 13835 9180 512 512
ReadX 13835 9692 512 512
ReadX 13835 10204 512 512
ReadX 13835 10716 512 512
ReadX 13835 11228 512 512
ReadX 13835 11740 512 512
ReadX 13835 12252 512 512
ReadX 13835 12764 512 512
ReadX 13835 13276 310 310
ReadX 13835 3001 512 512
ReadX 13835 2562 512 512
ReadX 13835 2626 512 512
ReadX 13835 3003 512 512
ReadX 13835 2721 512 512
ReadX 13835 2626 512 512
ReadX 13835 3138 512 512
ReadX 13835 3650 512 512
ReadX 13835 4162 512 512
ReadX 13835 4674 512 512
ReadX 13835 5186 512 512
ReadX 13835 5698 512 512
ReadX 13835 6210 424 424
ReadX 13835 2612 88 88
ReadX 13835 2700 512 512
ReadX 13835 3212 512 512
ReadX 13835 3724 512 512
ReadX 13835 4236 512 512
ReadX 13835 4748 512 512
ReadX 13835 5260 512 512
ReadX 13835 5772 424 424
ReadX 13835 2642 88 88
ReadX 13835 2730 512 512
ReadX 13835 3242 512 512
ReadX 13835 3754 512 512
ReadX 13835 4266 512 512
ReadX 13835 4778 512 512
ReadX 13835 5290 512 512
ReadX 13835 5802 512 512
ReadX 13835 6314 512 512
ReadX 13835 6826 512 512
ReadX 13835 7338 512 512
ReadX 13835 7850 512 512
ReadX 13835 8362 512 512
ReadX 13835 8874 512 512
ReadX 13835 9386 512 512
ReadX 13835 9898 512 512
ReadX 13835 10410 512 512
ReadX 13835 10922 512 512
ReadX 13835 11434 512 512
ReadX 13835 11946 512 512
ReadX 13835 12458 512 512
ReadX 13835 2716 512 512
ReadX 13835 2717 512 512
ReadX 13835 2718 512 512
ReadX 13835 3230 512 512
ReadX 13835 2721 512 512
ReadX 13835 3233 512 512
ReadX 13835 3745 512 512
ReadX 13835 4257 512 512
ReadX 13835 4769 512 512
ReadX 13835 5281 512 512
ReadX 13835 5793 512 512
ReadX 13835 6305 512 512
ReadX 13835 6817 512 512
ReadX 13835 7329 512 512
ReadX 13835 7841 512 512
ReadX 13835 8353 512 512
ReadX 13835 8865 512 512
ReadX 13835 9377 512 512
ReadX 13835 9889 512 512
ReadX 13835 10401 512 512
ReadX 13835 10913 512 512
ReadX 13835 11425 512 512
ReadX 13835 11937 512 512
ReadX 13835 12449 512 512
ReadX 13835 12961 512 512
ReadX 13835 13473 512 512
ReadX 13835 13985 106 106
ReadX 13835 2820 406 406
ReadX 13835 3226 512 512
ReadX 13835 3738 512 512
ReadX 13835 4250 512 512
ReadX 13835 4762 512 512
ReadX 13835 5274 512 512
ReadX 13835 5786 512 512
ReadX 13835 6298 512 512
ReadX 13835 6810 512 512
ReadX 13835 7322 512 512
ReadX 13835 7834 512 512
ReadX 13835 8346 512 512
ReadX 13835 8858 512 512
ReadX 13835 9370 512 512
ReadX 13835 9882 512 512
ReadX 13835 10394 512 512
ReadX 13835 10906 512 512
ReadX 13835 11418 182 182
ReadX 13835 2717 512 512
ReadX 13835 258 512 512
ReadX 13835 470 512 512
ReadX 13835 376 512 512
ReadX 13835 888 512 512
ReadX 13835 1400 512 512
ReadX 13835 1912 512 512
ReadX 13835 2424 512 512
ReadX 13835 2936 512 512
ReadX 13835 3448 512 512
ReadX 13835 3960 424 424
ReadX 13835 362 88 88
ReadX 13835 450 512 512
ReadX 13835 962 512 512
ReadX 13835 1474 512 512
ReadX 13835 1986 512 512
ReadX 13835 2498 512 512
ReadX 13835 3010 512 512
ReadX 13835 3522 424 424
ReadX 13835 392 88 88
ReadX 13835 480 512 512
ReadX 13835 992 512 512
ReadX 13835 1504 512 512
ReadX 13835 2016 512 512
ReadX 13835 2528 512 512
ReadX 13835 3040 512 512
ReadX 13835 3552 512 512
ReadX 13835 4064 512 512
ReadX 13835 4576 512 512
ReadX 13835 5088 512 512
ReadX 13835 5600 512 512
ReadX 13835 6112 512 512
ReadX 13835 6624 512 512
ReadX 13835 7136 512 512
ReadX 13835 7648 512 512
ReadX 13835 8160 512 512
ReadX 13835 8672 512 512
ReadX 13835 9184 512 512
ReadX 13835 9696 512 512
ReadX 13835 10208 512 512
ReadX 13835 464 512 512
ReadX 13835 465 512 512
ReadX 13835 466 512 512
ReadX 13835 978 512 512
ReadX 13835 470 512 512
ReadX 13835 982 512 512
ReadX 13835 1494 512 512
ReadX 13835 2006 512 512
ReadX 13835 2518 512 512
ReadX 13835 3030 512 512
ReadX 13835 3542 512 512
ReadX 13835 4054 512 512
ReadX 13835 4566 512 512
ReadX 13835 5078 512 512
ReadX 13835 5590 512 512
ReadX 13835 6102 512 512
ReadX 13835 6614 512 512
ReadX 13835 7126 512 512
ReadX 13835 7638 512 512
ReadX 13835 8150 512 512
ReadX 13835 8662 512 512
ReadX 13835 9174 512 512
ReadX 13835 9686 512 512
ReadX 13835 10198 512 512
ReadX 13835 10710 333 333
ReadX 13835 11043 512 512
ReadX 13835 11555 179 179
ReadX 13835 11734 512 512
ReadX 13835 12246 512 512
ReadX 13835 12758 512 512
ReadX 13835 13270 512 512
ReadX 13835 13782 512 512
ReadX 13835 14294 512 512
ReadX 13835 14806 512 512
ReadX 13835 15318 512 512
ReadX 13835 15830 512 512
ReadX 13835 16342 512 512
ReadX 13835 16854 512 512
ReadX 13835 17366 512 512
ReadX 13835 17878 512 512
ReadX 13835 18390 512 512
ReadX 13835 18902 512 512
ReadX 13835 19414 512 512
ReadX 13835 19926 512 512
ReadX 13835 20438 512 512
ReadX 13835 20950 512 512
ReadX 13835 21462 512 512
ReadX 13835 21974 350 350
ReadX 13835 465 512 512
ReadX 13835 3812 512 512
ReadX 13835 4046 512 512
ReadX 13835 3828 512 512
ReadX 13835 256 512 512
ReadX 13835 260 512 512
ReadX 13835 4066 512 512
ReadX 13835 4578 512 512
ReadX 13835 5090 512 512
ReadX 13835 5602 512 512
ReadX 13835 6114 512 512
ReadX 13835 6626 512 512
ReadX 13835 7138 512 512
ReadX 13835 7650 394 394
ReadX 13835 4052 118 118
ReadX 13835 4170 512 512
ReadX 13835 4682 512 512
ReadX 13835 5194 512 512
ReadX 13835 5706 512 512
ReadX 13835 6218 512 512
ReadX 13835 6730 512 512
ReadX 13835 7242 394 394
ReadX 13835 4082 118 118
ReadX 13835 4200 512 512
ReadX 13835 4712 512 512
ReadX 13835 5224 512 512
ReadX 13835 5736 512 512
ReadX 13835 6248 512 512
ReadX 13835 6760 512 512
ReadX 13835 7272 512 512
ReadX 13835 7784 394 394
ReadX 13835 256 118 118
ReadX 13835 374 512 512
ReadX 13835 886 512 512
ReadX 13835 1398 512 512
ReadX 13835 1910 512 512
ReadX 13835 2422 512 512
ReadX 13835 2934 512 512
ReadX 13835 3446 512 512
ReadX 13835 3958 512 512
ReadX 13835 4470 512 512
ReadX 13835 4982 512 512
ReadX 13835 5494 512 512
ReadX 13835 6006 512 512
ReadX 13835 6518 512 512
ReadX 13835 7030 512 512
ReadX 13835 7542 512 512
ReadX 13835 8054 512 512
ReadX 13835 8566 512 512
ReadX 13835 9078 512 512
ReadX 13835 9590 512 512
ReadX 13835 10102 512 512
ReadX 13835 259 512 512
ReadX 13835 771 512 512
ReadX 13835 259 512 512
ReadX 13835 259 512 512
ReadX 13835 771 512 512
ReadX 13835 1283 512 512
ReadX 13835 1795 512 512
ReadX 13835 2307 512 512
ReadX 13835 2819 512 512
ReadX 13835 3331 512 512
ReadX 13835 3843 512 512
ReadX 13835 4355 512 512
ReadX 13835 4867 512 512
ReadX 13835 260 512 512
ReadX 13835 772 512 512
ReadX 13835 1284 512 512
ReadX 13835 1796 512 512
ReadX 13835 2308 512 512
ReadX 13835 2820 512 512
ReadX 13835 3332 512 512
ReadX 13835 3844 512 512
ReadX 13835 4356 512 512
ReadX 13835 4868 512 512
ReadX 13835 5380 512 512
ReadX 13835 5892 512 512
ReadX 13835 6404 512 512
ReadX 13835 6916 512 512
ReadX 13835 7428 512 512
ReadX 13835 7940 512 512
ReadX 13835 8452 512 512
ReadX 13835 8964 512 512
ReadX 13835 9476 512 512
ReadX 13835 9988 512 512
ReadX 13835 10500 378 378
ReadX 13835 10878 512 512
ReadX 13835 11390 134 134
ReadX 13835 11524 512 512
ReadX 13835 12036 512 512
ReadX 13835 12548 512 512
ReadX 13835 13060 512 512
ReadX 13835 13572 138 138
ReadX 13835 259 512 512
ReadX 13835 273 512 512
ReadX 13835 276 512 512
ReadX 13835 295 512 512
ReadX 13835 288 512 512
ReadX 13835 296 512 512
ReadX 13835 259 512 512
ReadX 13835 273 512 512
ReadX 13835 273 512 512
ReadX 13835 785 512 512
ReadX 13835 1297 512 512
ReadX 13835 1809 512 512
ReadX 13835 2321 512 512
ReadX 13835 274 512 512
ReadX 13835 274 512 512
ReadX 13835 274 497 497
ReadX 13835 272 15 15
ReadX 13835 287 512 512
ReadX 13835 799 512 512
ReadX 13835 273 512 512
ReadX 13835 785 512 512
ReadX 13835 1297 512 512
ReadX 13835 1809 512 512
ReadX 13835 2321 512 512
ReadX 13835 2833 317 317
ReadX 13835 274 195 195
ReadX 13835 469 512 512
ReadX 13835 981 512 512
ReadX 13835 1493 512 512
ReadX 13835 2005 512 512
ReadX 13835 2517 512 512
ReadX 13835 3029 512 512
ReadX 13835 3541 512 512
ReadX 13835 4053 512 512
ReadX 13835 4565 250 250
ReadX 13835 274 512 512
ReadX 13835 283 512 512
ReadX 13835 795 512 512
ReadX 13835 276 512 512
ReadX 13835 788 512 512
ReadX 13835 1300 512 512
ReadX 13835 1812 512 512
ReadX 13835 2324 512 512
ReadX 13835 2836 512 512
ReadX 13835 3348 512 512
ReadX 13835 3860 420 420
ReadX 13835 275 92 92
ReadX 13835 367 512 512
ReadX 13835 879 512 512
ReadX 13835 1391 512 512
ReadX 13835 1903 512 512
ReadX 13835 2415 512 512
ReadX 13835 2927 512 512
ReadX 13835 3439 420 420
ReadX 13835 277 92 92
ReadX 13835 369 512 512
ReadX 13835 881 512 512
ReadX 13835 1393 512 512
ReadX 13835 1905 512 512
ReadX 13835 2417 512 512
ReadX 13835 2929 512 512
ReadX 13835 3441 512 512
ReadX 13835 3953 512 512
ReadX 13835 4465 512 512
ReadX 13835 4977 512 512
ReadX 13835 5489 512 512
ReadX 13835 6001 512 512
ReadX 13835 6513 512 512
ReadX 13835 7025 512 512
ReadX 13835 7537 512 512
ReadX 13835 8049 512 512
ReadX 13835 8561 512 512
ReadX 13835 9073 512 512
ReadX 13835 9585 512 512
ReadX 13835 10097 512 512
ReadX 13835 282 512 512
ReadX 13835 794 512 512
ReadX 13835 1306 512 512
ReadX 13835 1818 512 512
ReadX 13835 2330 512 512
ReadX 13835 2842 512 512
ReadX 13835 3354 512 512
ReadX 13835 3866 512 512
ReadX 13835 4378 512 512
ReadX 13835 284 512 512
ReadX 13835 796 512 512
ReadX 13835 1308 512 512
ReadX 13835 1820 512 512
ReadX 13835 2332 512 512
ReadX 13835 2844 512 512
ReadX 13835 3356 512 512
ReadX 13835 3868 512 512
ReadX 13835 4380 512 512
ReadX 13835 4892 512 512
ReadX 13835 5404 512 512
ReadX 13835 5916 512 512
ReadX 13835 6428 512 512
ReadX 13835 6940 512 512
ReadX 13835 7452 512 512
ReadX 13835 7964 512 512
ReadX 13835 8476 512 512
ReadX 13835 8988 512 512
ReadX 13835 9500 512 512
ReadX 13835 10012 512 512
ReadX 13835 10524 472 472
ReadX 13835 288 40 40
ReadX 13835 328 512 512
ReadX 13835 840 512 512
ReadX 13835 1352 512 512
ReadX 13835 1864 512 512
ReadX 13835 2376 512 512
ReadX 13835 2888 512 512
ReadX 13835 3400 512 512
ReadX 13835 3912 512 512
ReadX 13835 4424 512 512
ReadX 13835 4936 512 512
ReadX 13835 5448 512 512
ReadX 13835 5960 512 512
ReadX 13835 6472 512 512
Rea